Received: by 2002:a05:6a10:a0d1:0:0:0:0 with SMTP id j17csp505394pxa; Fri, 21 Aug 2020 12:57:21 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxw5hllpHdO1uwgRtPDa1pyhWkoW7cKEfR3kx9T/KjB6OIorc7//lggC1sH9on5LHGYeHi0 X-Received: by 2002:a50:9358:: with SMTP id n24mr4541017eda.7.1598039840968; Fri, 21 Aug 2020 12:57:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1598039840; cv=none; d=google.com; s=arc-20160816; b=HaTxYyZ8Wr4Kbf8/+a/nv45i2xX2HKINKCDaqeaYw0bWKwg6BtRp3jOcLZBIvwDHle mWeyD+zJL73Q+fpuWuGFiPJIdd+ErENzRGlQyGAenwBhs11BNn69+vFmxO3aQ7mEJzle kvvcDTJgSxrw8k/fqWcHODS2dILZ82HRyEw1hdq1PdC5xNP2QArSTl0buO2ODdJjy7WL 7KDFRHWHxuyEVjPONBj860smLA5f17OnRX23u6+hpqfcPHta73Ulbesyk+CesMJLIiyM +ELcNo8ugZq7tY/8g+RS6dr7Cx5/IwdNydjWfXFVakjZWJmh1nFzZ3vJvktDN0EX2zeu Qpfw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=X7lCPABz4JNrayMBdAlXz/o0k5wzYACi9B/neD0BSpY=; b=EB1DDx/sghnCeYM5tccku6mfyEpW/AwZDjMudVImRm7d9MmTWk9ReeMMz9cfTszumg vZq4tuwd0S+QGL95STvOvZtAkscRVugI2eyqPS6rZUkal9QQOa+XuhabHeT/OnrLW+a3 qxBqgnv7GrRCuaN337Hu3CzydT8BdbkfyC8lzV0jHFBjEZ18yZsfqzZ0Wp0p6L3HyGUb 6ATIRhU/Iw5H0G+S5tA60AX7aYpizYVUwDd78iw1/yhXGxqPW1iVUEslciXJOe9OI0re 9Hv9q1TA9OEImD4BHJSZRKEecIo4FYRNe2n+RCDi84UU6mtXU8rwLroQ7391+bBzaGOC +U5Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=h4th2Gwt; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id l25si1789859edv.47.2020.08.21.12.56.57; Fri, 21 Aug 2020 12:57:20 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=h4th2Gwt; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726968AbgHUTzP (ORCPT + 99 others); Fri, 21 Aug 2020 15:55:15 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:38296 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726698AbgHUTyF (ORCPT ); Fri, 21 Aug 2020 15:54:05 -0400 Received: from mail-pg1-x541.google.com (mail-pg1-x541.google.com [IPv6:2607:f8b0:4864:20::541]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 7FEF7C06179B for ; Fri, 21 Aug 2020 12:54:02 -0700 (PDT) Received: by mail-pg1-x541.google.com with SMTP id s15so1478184pgc.8 for ; Fri, 21 Aug 2020 12:54:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=X7lCPABz4JNrayMBdAlXz/o0k5wzYACi9B/neD0BSpY=; b=h4th2Gwty/g8Cg6oI4xBM2C9OsM+YtTMFNWMQxaSJxeMsiGbGHmjIpyPzRqnDYUohj mZEWv+JTiMGCqWpGcvezka0JZwFqupIZBq+bYlxEMz2m2f5RPnDUM/esPBUqClXzhknr KDHkGu/E7WUrNYpV0Two51F+fgNxBgpigGGNs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=X7lCPABz4JNrayMBdAlXz/o0k5wzYACi9B/neD0BSpY=; b=T7EMTQIcSnGlzku21nyDmn7Fs8JtXhE4u/4FgtIi8BT5jCOnRk8tX1AAvE/zuVk+GH ItGIZMEXUSvdJ9GwTD3OQIDBPccn8qPlwQ/Yn1kHzRd3gGH0VvBNpaTSWa7CTYaYEkGn jLEdjFL1Kcnj1n0PJlMGyT8xJy1amy9UmaIprnZtfu3KVC/GXdylbbcjVrCgpyonJsCu 9XrHw6NiKuOj4Z57WBypnBMDxH46cbG+tyRso8LLeESbY5wfde8gPl2c7bl4ccxdyS/b t4Zsh1xudnWWY9SMJE695PRqbTPBUYx4+y3Lm4g8R3fM+itTzCtDdxJIqeTMyES6R82Y ZxMw== X-Gm-Message-State: AOAM531BESdtAvYPF8Ugn2LuhXnR1L5kXjfQBK23M/fIylDGpPYOrNK2 EEs8v2xrAAVa0XmYX+qDIUpJmQ== X-Received: by 2002:a63:cd46:: with SMTP id a6mr3322488pgj.267.1598039642059; Fri, 21 Aug 2020 12:54:02 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id l67sm3026438pga.41.2020.08.21.12.53.58 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Aug 2020 12:53:59 -0700 (PDT) From: Kees Cook To: Ingo Molnar Cc: Kees Cook , Catalin Marinas , Mark Rutland , Ard Biesheuvel , Peter Collingbourne , James Morse , Borislav Petkov , Ingo Molnar , Russell King , Masahiro Yamada , Arvind Sankar , Nick Desaulniers , Nathan Chancellor , Arnd Bergmann , x86@kernel.org, clang-built-linux@googlegroups.com, linux-arch@vger.kernel.org, linux-efi@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Subject: [PATCH v6 25/29] x86/build: Warn on orphan section placement Date: Fri, 21 Aug 2020 12:43:06 -0700 Message-Id: <20200821194310.3089815-26-keescook@chromium.org> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20200821194310.3089815-1-keescook@chromium.org> References: <20200821194310.3089815-1-keescook@chromium.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org We don't want to depend on the linker's orphan section placement heuristics as these can vary between linkers, and may change between versions. All sections need to be explicitly handled in the linker script. Now that all sections are explicitly handled, enable orphan section warnings. Signed-off-by: Kees Cook --- arch/x86/Makefile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/arch/x86/Makefile b/arch/x86/Makefile index 4346ffb2e39f..ccacbf808552 100644 --- a/arch/x86/Makefile +++ b/arch/x86/Makefile @@ -209,6 +209,10 @@ ifdef CONFIG_X86_64 LDFLAGS_vmlinux += -z max-page-size=0x200000 endif +# We never want expected sections to be placed heuristically by the +# linker. All sections should be explicitly named in the linker script. +LDFLAGS_vmlinux += --orphan-handling=warn + archscripts: scripts_basic $(Q)$(MAKE) $(build)=arch/x86/tools relocs -- 2.25.1