Received: by 2002:a25:1985:0:0:0:0:0 with SMTP id 127csp3046434ybz; Mon, 27 Apr 2020 09:03:24 -0700 (PDT) X-Google-Smtp-Source: APiQypKxvc+n8AKrP458wIeLQbHm4v/5iXOJIaAcGlPiToXyjyH1M+uZMCOIKyQWpXU/vSsh3LyB X-Received: by 2002:a17:906:1d4c:: with SMTP id o12mr20953925ejh.357.1588003404391; Mon, 27 Apr 2020 09:03:24 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1588003404; cv=none; d=google.com; s=arc-20160816; b=pPiHnFlyZIBn4aqEa7EgzsEcXEbL/aZ49vOUMbzHoyTnz8GU69FrXCrktQH3T1ZMQ+ cj3hIssf3iGQfUSq/fmVGdhFdMphv/SP4DOjvKRXY0JcR3mOy/+RCwwGghKXrk+hrQLd Py3r7MyvqPlj6Fad8WMLZlIudO7mjLTC0Lm886TYJxJTC38cMlIZ3dYbsmXmkufU1Skh 0fjcisMorqjlabfDFCbf18jM9PAgi4IcI55A/eTglkJSM/gTfE5C9iYFn2ANcdUt81yW AjerqsqIo7Rkm3P0u+amlIjwXPcz17yT1NNusSFTguyqFWgSGCvcXIBN5g5WBg5Yxyhl nzsQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:from:subject:references :mime-version:message-id:in-reply-to:date:dkim-signature; bh=kikYfFSTfca/HkjJiT4VwZFMKgohIqKorfyIql1wDNc=; b=ssRjeDuv6eOGFhJnHIuop8c5T2zlStGIiODmNsm6jCbj34bOKGOyTauXvCgGWGThWW 5nRJw2A65vY9Td6Oe5dyJTxefXZ9txGwXU4sqHE7Zepj7u+2tHgdw3Ky+alpD3weflD1 k3jwmWtU7e+dErBY4x72TSsLLiHx9cvGrnmQrC8tc/FnsiwjFLQnKkGtD/xEDkZyV8d2 HKZsMCu2XICTTf/wELz+p/4oOEzphWSaTNnYizMs9HYJ/4v2LZltirtWTUiEcK5qjHQk CL44SXytjm43nlmzB6jleCk0pAFpBKTHdWv4xF/U47ZdYsgjb2rXntMRW2HItqGgHubA ddcw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b="LKPo6Bc/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id t20si3207edy.543.2020.04.27.09.02.32; Mon, 27 Apr 2020 09:03:24 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b="LKPo6Bc/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728548AbgD0QAg (ORCPT + 99 others); Mon, 27 Apr 2020 12:00:36 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48460 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-FAIL-OK-FAIL) by vger.kernel.org with ESMTP id S1728517AbgD0QAe (ORCPT ); Mon, 27 Apr 2020 12:00:34 -0400 Received: from mail-yb1-xb4a.google.com (mail-yb1-xb4a.google.com [IPv6:2607:f8b0:4864:20::b4a]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 841AEC0610D5 for ; Mon, 27 Apr 2020 09:00:34 -0700 (PDT) Received: by mail-yb1-xb4a.google.com with SMTP id j14so20899138ybt.10 for ; Mon, 27 Apr 2020 09:00:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:in-reply-to:message-id:mime-version:references:subject:from:to :cc; bh=kikYfFSTfca/HkjJiT4VwZFMKgohIqKorfyIql1wDNc=; b=LKPo6Bc/Q5MtQzUK3oQa6NKadNaC15z3lO/zjdaounxLr3Yr/P6IlUdUGblL+xU5k4 spAtU8NF5ubk32gUq0m5VXjp6kv3GAFhZ4b47WHO1jV9Re1P0wgxqNnIy78PYlqK6iHg Lz7JdX7MXdIx+DHcDceIZRSq68+3ppbTa32fDBBMVQUsXCdSeZ2Rk0+iayOXLcIpH0mh 1y8jfaqoFffOSgqi3glfbRygtn76YwRgqeTcaTsWT5Ma8vEPSbQu5Sf1lQXSpiWIQ5jH osRX2DeCrw1RtV2JiczAkw6ANMNeNCpzDPw4w/B5fxj55cgpesof+s+eghyxXIYIpJqz Cp7A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:in-reply-to:message-id:mime-version :references:subject:from:to:cc; bh=kikYfFSTfca/HkjJiT4VwZFMKgohIqKorfyIql1wDNc=; b=gbzteNDEEiJ2C2oosz4Y0fKUOO27RWPGhp7CBNZJ8/u93GFsNpSG7Ft09TO3I+5w7q n9oltMGyg+mot4ex1gQoaFULSuBSW0VNMNyWnBuJBknZoMRLzux9qQhyl61Clrp8THqV DPRQRgmYXRDK5oeUSg9xGoiOnmVjfZS19xA8Dam2XTNFITxjSt7fLxjGwFDK96+XmbqV mecQipRnW8GRqngw60Bx21AHBzo2WIjwEagEYDss3MTmHd4OzL7DxcbogFFcep6kt2AY 044Cc31vwrGsL4u/B6ZUewcy6vnEKgTOVhW5LA0OFQz7lHkC/RS3zBv9lsWd44Nie+Wq e8SA== X-Gm-Message-State: AGi0PubYv4piYN69PZDtIXqXe6zOcP8ADnBEH1+2Rh6zcDyGaTbSc2HL 5IWT/Coqh2ZoRCykGxhOtoSS3wDFOe8fBszT9ug= X-Received: by 2002:a25:ddc3:: with SMTP id u186mr36888616ybg.383.1588003232559; Mon, 27 Apr 2020 09:00:32 -0700 (PDT) Date: Mon, 27 Apr 2020 09:00:09 -0700 In-Reply-To: <20200427160018.243569-1-samitolvanen@google.com> Message-Id: <20200427160018.243569-4-samitolvanen@google.com> Mime-Version: 1.0 References: <20191018161033.261971-1-samitolvanen@google.com> <20200427160018.243569-1-samitolvanen@google.com> X-Mailer: git-send-email 2.26.2.303.gf8c07b1a785-goog Subject: [PATCH v13 03/12] scs: add support for stack usage debugging From: Sami Tolvanen To: Will Deacon , Catalin Marinas , James Morse , Steven Rostedt , Ard Biesheuvel , Mark Rutland , Masahiro Yamada , Michal Marek , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot Cc: Dave Martin , Kees Cook , Laura Abbott , Marc Zyngier , Masami Hiramatsu , Nick Desaulniers , Jann Horn , Miguel Ojeda , clang-built-linux@googlegroups.com, kernel-hardening@lists.openwall.com, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Sami Tolvanen Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Implements CONFIG_DEBUG_STACK_USAGE for shadow stacks. When enabled, also prints out the highest shadow stack usage per process. Signed-off-by: Sami Tolvanen Reviewed-by: Kees Cook Acked-by: Will Deacon --- kernel/scs.c | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/kernel/scs.c b/kernel/scs.c index 8769016c714c..2a96573f2b1b 100644 --- a/kernel/scs.c +++ b/kernel/scs.c @@ -68,6 +68,43 @@ int scs_prepare(struct task_struct *tsk, int node) return 0; } +#ifdef CONFIG_DEBUG_STACK_USAGE +static unsigned long __scs_used(struct task_struct *tsk) +{ + unsigned long *p = task_scs(tsk); + unsigned long *end = __scs_magic(p); + unsigned long s = (unsigned long)p; + + while (p < end && READ_ONCE_NOCHECK(*p)) + p++; + + return (unsigned long)p - s; +} + +static void scs_check_usage(struct task_struct *tsk) +{ + static unsigned long highest; + unsigned long used = __scs_used(tsk); + unsigned long prev; + unsigned long curr = highest; + + while (used > curr) { + prev = cmpxchg_relaxed(&highest, curr, used); + + if (prev == curr) { + pr_info("%s (%d): highest shadow stack usage: " + "%lu bytes\n", + tsk->comm, task_pid_nr(tsk), used); + break; + } + + curr = prev; + } +} +#else +static inline void scs_check_usage(struct task_struct *tsk) {} +#endif + void scs_release(struct task_struct *tsk) { void *s; @@ -77,6 +114,7 @@ void scs_release(struct task_struct *tsk) return; WARN_ON(scs_corrupted(tsk)); + scs_check_usage(tsk); scs_account(tsk, -1); scs_free(s); -- 2.26.2.303.gf8c07b1a785-goog