Received: by 2002:a05:6358:16cc:b0:ea:6187:17c9 with SMTP id r12csp2911980rwl; Fri, 6 Jan 2023 12:36:23 -0800 (PST) X-Google-Smtp-Source: AMrXdXvCtiztJzirM/dPV6nS07ZznAveTtmYRuI8NcCtWKgDT/iEeK3Fk/aML/Q+91zX01iTdb5r X-Received: by 2002:a05:6a00:99d:b0:581:38bc:b5bc with SMTP id u29-20020a056a00099d00b0058138bcb5bcmr55193690pfg.1.1673037383063; Fri, 06 Jan 2023 12:36:23 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1673037383; cv=none; d=google.com; s=arc-20160816; b=tRe3X4jKK8kjCZNwToKenpUMtBTNpWvsQzE/EyKG2rXVYTIltZf5HFPk6QQ5tcx4it 1qSVC+FLOZ/aKEsf/mKGJyAGxIt7h8c+0xVHs0r3H3ATfEbmB4sfR0WitbSGG9UWAh1i WWvNsOR418jK2eBKlbZS1Z59Jp6JYnU3y6EFoCHxwMO68XAG2tr43r7VT28D/rLWODYQ XQulEgQu0aHceCmhqmzyrtMgGCUvAgxDZhxnhRk7PTQZrjcUItljiyqJemilds6f3xJp Sw/2KMN1uzTTb1rJTdLP4t/B47ylrKQhlRohg7n2stvUS72NWUDGz4Ng8vIy9nW9djy/ 2p2A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=euU3G/ya0gtqqY9FQvfGrmCYDfDSO1DRx03jpA8QOoU=; b=zmGq1YP0kcJjgzKhrLsWQQi2Dc5p7OxmDp1nmRkTIEberjufIGHEzyi7mp0xvPEIRs fFGCoTLnOkVI4tIMdquPmUbWUaNggGhjOooMiWc9YEFDFLu6l+AMAhgHQBBBikcHiTi9 XV0BUFBxX+C9UPGOGngi9+v5KMv55UqYiTS99FfoOwzvVm0t8RxXC0f6+L7wZ7Gg9bc3 d18V46wXqSZX6u4DU9DUGSclOPsh9pHaIfy9gOp20u/NhB22y+uAJEiLrgZS6e4Ye1gm kn26yEUChqHAxRB/47oCUEBtAX1iYArcVfsbm4JsdkcJLEy8X/tCCj3PLU/YSa8LtyFg TNUw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=DxpJV32j; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id y1-20020aa79ae1000000b0057555579113si2221468pfp.316.2023.01.06.12.36.15; Fri, 06 Jan 2023 12:36:23 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@chromium.org header.s=google header.b=DxpJV32j; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S236660AbjAFUQV (ORCPT + 55 others); Fri, 6 Jan 2023 15:16:21 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:50112 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S236631AbjAFUPz (ORCPT ); Fri, 6 Jan 2023 15:15:55 -0500 Received: from mail-pj1-x102c.google.com (mail-pj1-x102c.google.com [IPv6:2607:f8b0:4864:20::102c]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 980D182F57 for ; Fri, 6 Jan 2023 12:14:27 -0800 (PST) Received: by mail-pj1-x102c.google.com with SMTP id w4-20020a17090ac98400b002186f5d7a4cso6358027pjt.0 for ; Fri, 06 Jan 2023 12:14:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=euU3G/ya0gtqqY9FQvfGrmCYDfDSO1DRx03jpA8QOoU=; b=DxpJV32juCIC7h57KYTRrjCuSAEKETG43oBjZgf71yvmAQHb0L6DqYb1TF0bUPTUta zq/0lgACacdY+WTeXku5JZ3Y1TAbuKWHPO8sa/cyKEk48X+V8Ut3URpj3vxBHM867N28 dEqxrQbhpBIzPD95jnlH21RK+ftUvSSFMAtOc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=euU3G/ya0gtqqY9FQvfGrmCYDfDSO1DRx03jpA8QOoU=; b=ShgVIWAOtreR7aMpHy/MIYvZwUJYVKHvGzqbzKWNHoytfox82UqLb7L0VpNrv/On2w gNuD//mT6xiqZCTaMlMRMAl+NaKOTmTW+8syq+gdi3c+96vFu5xtIqPZ6GI0WHEW/mW9 V2Ewl5J6SCr//f3P+5kkwDi8HnYN1Z+j9fer/QHIGSNhHJpHJKZybttUPAK68gfDf4ti ihJD6F4DMP1DLzzl+U3jYf5m7nvKr2EGIVV0LK9F9Gfn+cA1njbXe8hSG/uW3DpTcq0O 4HJobFro0qvvCOFA0KQSnUEl8JOuv9j4hXbx9tu1CIbSTFdDoOy7qAkXhGxrStAvo0rN QcQA== X-Gm-Message-State: AFqh2kp34ZQGkAA8swAo4JBxo0H/gHNKR5gzD3h9eNDiDVbbZMqZUTmw GfSyeRixxS+u+B+NceU8jMtQpw== X-Received: by 2002:a05:6a20:3d26:b0:a7:8c43:d669 with SMTP id y38-20020a056a203d2600b000a78c43d669mr74101910pzi.51.1673036019131; Fri, 06 Jan 2023 12:13:39 -0800 (PST) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id e2-20020a170902784200b0019309be03e7sm1347726pln.66.2023.01.06.12.13.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Jan 2023 12:13:38 -0800 (PST) Date: Fri, 6 Jan 2023 12:13:37 -0800 From: Kees Cook To: Vincent MAILHOL Cc: Arnd Bergmann , Jann Horn , "David S. Miller" , Jakub Kicinski , Andrew Lunn , kernel test robot , Oleksij Rempel , Sean Anderson , Alexandru Tachici , Amit Cohen , "Gustavo A. R. Silva" , netdev@vger.kernel.org, linux-kernel@vger.kernel.org, linux-hardening@vger.kernel.org, Linux API Subject: Re: minimum compiler for Linux UAPI (was Re: [PATCH v3] ethtool: Replace 0-length array with flexible array) Message-ID: <202301061209.4EA0C177@keescook> References: <20230106042844.give.885-kees@kernel.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Jan 06, 2023 at 11:25:14PM +0900, Vincent MAILHOL wrote: > On Fri. 6 Jan 2023 at 22:19, Jann Horn wrote: > > On Fri, Jan 6, 2023 at 5:28 AM Kees Cook wrote: > > > Zero-length arrays are deprecated[1]. Replace struct ethtool_rxnfc's > > > "rule_locs" 0-length array with a flexible array. Detected with GCC 13, > > > using -fstrict-flex-arrays=3: > [...] > > > diff --git a/include/uapi/linux/ethtool.h b/include/uapi/linux/ethtool.h > > > index 58e587ba0450..3135fa0ba9a4 100644 > > > --- a/include/uapi/linux/ethtool.h > > > +++ b/include/uapi/linux/ethtool.h > > > @@ -1183,7 +1183,7 @@ struct ethtool_rxnfc { > > > __u32 rule_cnt; > > > __u32 rss_context; > > > }; > > > - __u32 rule_locs[0]; > > > + __u32 rule_locs[]; > > > > Stupid question: Is this syntax allowed in UAPI headers despite not > > being part of standard C90 or C++? Are we relying on all C/C++ > > compilers for pre-C99 having gcc/clang extensions? > > The [0] isn't part of the C90 standard either. So having to choose > between [0] and [], the latter is the most portable nowadays. > > If I do a bit of speleology, I can see that C99 flexible array members > were used as early as v2.6.19 (released in November 2006): > > https://elixir.bootlin.com/linux/v2.6.19/source/include/linux/usb/audio.h#L36 > > This is prior to the include/linux and include/uapi/linux split, but > believe me, this usb/audio.h file is indeed part of the uapi. > So, yes, using C99 flexible array members in the UAPI is de facto > allowed because it was used for the last 16 years. > > An interesting sub question would be: > > What are the minimum compiler requirements to build a program using > the Linux UAPI? You're right -- we haven't explicitly documented this. C99 seems like the defacto minimum, though. > And, after research, I could not find the answer. The requirements to > build the kernel are well documented: > > https://docs.kernel.org/process/changes.html#changes > > But no clue for the uapi. I guess that at one point in 2006, people > decided that it was time to set the minimum requirement to C99. Maybe > this matches the end of life of the latest pre-C99 GCC version? The > detailed answer must be hidden somewhere on lkml. I would make the argument that the requirements for building Linux UAPI should match that of building the kernel... -- Kees Cook