Received: by 2002:a05:6a10:2726:0:0:0:0 with SMTP id ib38csp1234536pxb; Fri, 1 Apr 2022 08:04:49 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyKRtoWDAz32y+D6UOkuBEUGY7ufoo9M+JxfOwcHGauIa1IBSnruXr9x2hMvAEM7A/QXa4g X-Received: by 2002:a05:6402:350c:b0:419:3cb8:b714 with SMTP id b12-20020a056402350c00b004193cb8b714mr21383656edd.297.1648825489535; Fri, 01 Apr 2022 08:04:49 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1648825489; cv=none; d=google.com; s=arc-20160816; b=WgAK/tk1yrJGhHi8jOpCelIllmcAtXpL+7frJpwNkR/SnGhVTBS93DFRFXcgdo/0qp SVVqGGXk1ydthH7CxmGJr1ka8G0z0q49hHEzQze4cy51WECwSMnlh+BWCRoGrAC74CEp Bu/N01OrHc4SC6sqnPqrbnXcCGGTuJmSuz84I+NE3ZUNLM8F3SQdQ1dMb7kAhcs84F8/ yuXx6/yQIDCZUuVPAjLog6Q0ZyNG9I8iwrdJSVupcl36PMLoCTYJh2gWzb2kLrQmiyxU 2sw3qOXlAm+7DJagLUNreCvlwj/Pj2py2W6sj2QiPYmcb7zA2bHNlYPlSU6Sl0a/G0N2 DsPA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=YCOslDIO/0W733/ujDklGbRX/ha6VpRvkSSUEoU714s=; b=kxPse4GC6jLJbzpkKIN++aSBWJBjoAG+djYRociX89B4G52yowKPMpTxxPSvScfHei 4IWQYankr62S1B1lqF9oOaUAo91u/co9wH1XoaWQbNsnXkd+kowB3YqSwQ4iL8LR5E6c 6ws3y61N5VzpHRH7qcqxocwGR4uVwc5kH5j64UeLQBd7crmZtfFLOCUMnpCy6NIfMCu8 vgcKv6rT1Cyp8CUcVNxBZh8LF2/We3eaTs4WwBQ71149BS78pjaoDKD9cMnyF6bMq7dD LQ7kXiN/tywdTMiX2yrD51QorV3d1jMHq25H7o0M3I6Qi7nKv1yS+hkoN2U8I32faVUf Mfsg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=nzw9o0AJ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id a21-20020a170906275500b006df7cbdd0b7si1639647ejd.880.2022.04.01.08.04.18; Fri, 01 Apr 2022 08:04:49 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=nzw9o0AJ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S237931AbiCaTCG (ORCPT + 99 others); Thu, 31 Mar 2022 15:02:06 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:49152 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S237948AbiCaTCF (ORCPT ); Thu, 31 Mar 2022 15:02:05 -0400 Received: from mail-pf1-x42e.google.com (mail-pf1-x42e.google.com [IPv6:2607:f8b0:4864:20::42e]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 7768C1BD9A6 for ; Thu, 31 Mar 2022 12:00:16 -0700 (PDT) Received: by mail-pf1-x42e.google.com with SMTP id s11so404972pfu.13 for ; Thu, 31 Mar 2022 12:00:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=YCOslDIO/0W733/ujDklGbRX/ha6VpRvkSSUEoU714s=; b=nzw9o0AJLtRqnDYEvjxXTLiWlKWPs/MTqSc49MT79Nvi0jxqks7k/DYO3nbr+/O2MV xdNUqABzyfe3o+DPmH2ee8ccnTZyBR2yPKjOjzJpGF6TF5zLrLnHm/B5RXRf3HkkOcer p/YeAjvZaGsKXrWiKaqcsc3srAIykbXCJBxXA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=YCOslDIO/0W733/ujDklGbRX/ha6VpRvkSSUEoU714s=; b=uQFe68lLJmEDKLjRUEqWzv2mOn03oNzzhd7LIJScZ8qnWVDuojvbfoiyU5yUaEd21M wjSWecNf4md/X1klat1WhAWwfwEpG5GPz9/VOLLeMFOY4pUsrK+AltiY+9SbRFIcDziR G5QK2MF8n4Fc/QMcsBeErwm0ZXO5UIES3bgRSkwcyKg1w5S/NvgGLDsZprnaOwukELHz ycuknE6lw2aDqbC1Naa24FzCLWsJv+4Z0jHKCNLp3nchjvWCJGAQkcgfqaA7UpvVx7VV Hi9btaFM8LKvPhJAFmgsfzooeED+HqAy7vUgvkZWorIDik/QdiIl1E5oCMUD9glYkeBm 8J8Q== X-Gm-Message-State: AOAM5331ohJ3mb4rc+46jLRUh5iMud+UgcW58Ejm9tAqps6j2slIGFdR ybnq1K3AFZfur5q39OhYXv1MSg== X-Received: by 2002:a05:6a00:188f:b0:4fa:ece9:15d9 with SMTP id x15-20020a056a00188f00b004faece915d9mr7009932pfh.28.1648753215947; Thu, 31 Mar 2022 12:00:15 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id s3-20020a056a00194300b004f6664d26eesm222905pfk.88.2022.03.31.12.00.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 31 Mar 2022 12:00:15 -0700 (PDT) Date: Thu, 31 Mar 2022 12:00:15 -0700 From: Kees Cook To: Linus Torvalds Cc: Linux Kernel Mailing List , Andrew Morton , Christoph Hellwig , David Hildenbrand , Hari Bathini , Linux ARM , Logan Gunthorpe , Martin Oliveira , "Matthew Wilcox (Oracle)" , Mike Kravetz , Minchan Kim , Russell King , Stephen Rothwell , Zi Yan Subject: Re: [GIT PULL] hardening fixes for v5.18-rc1 Message-ID: <202203311157.F7FA779@keescook> References: <202203311127.503A3110@keescook> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Mar 31, 2022 at 11:49:42AM -0700, Linus Torvalds wrote: > On Thu, Mar 31, 2022 at 11:35 AM Kees Cook wrote: > > > > Please pull these hardening fixes for v5.18-rc1. This addresses an > > -Warray-bounds warning found under a few ARM defconfigs, and disables > > long-broken CONFIG_HARDENED_USERCOPY_PAGESPAN. > > Can't we just remove that HARDENED_USERCOPY_PAGESPAN thing entirely? > > Yes, yes, I know Matthew did that as part of other patches that is too > late to go in any more in this merge window, but just the removal > patch is a no-brainer. I can do that, but it seemed like more work for folks: a larger diff to look at, and a rebase for Matthew or me. It's not MUCH more work, but given the timing of the merge window, I wanted to have a minimal diff. > IOW, why not just do the attached? But I can certainly respin it, if you'd prefer? -- Kees Cook