From:   Eric DeVolder <eric.devolder@oracle.com>
To:     linux-kernel@vger.kernel.org, x86@kernel.org,
        kexec@lists.infradead.org, ebiederm@xmission.com,
        dyoung@redhat.com, bhe@redhat.com, vgoyal@redhat.com
Cc:     tglx@linutronix.de, mingo@redhat.com, bp@alien8.de,
        dave.hansen@linux.intel.com, hpa@zytor.com,
        nramas@linux.microsoft.com, thomas.lendacky@amd.com,
        robh@kernel.org, efault@gmx.de, rppt@kernel.org, david@redhat.com,
        sourabhjain@linux.ibm.com, konrad.wilk@oracle.com,
        boris.ostrovsky@oracle.com, eric.devolder@oracle.com
Subject: [PATCH v19 3/7] kexec: exclude elfcorehdr from the segment digest
Date:   Mon,  6 Mar 2023 11:22:24 -0500
Message-Id: <20230306162228.8277-4-eric.devolder@oracle.com>
In-Reply-To: <20230306162228.8277-1-eric.devolder@oracle.com>
References: <20230306162228.8277-1-eric.devolder@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Dq3aVG/6nch6PNj1bw319vgaD7ihAIUjDanKcS3/NDZr6rNUGyKB0+1H2TpO?=
 =?us-ascii?Q?kyKWZ8RIdmkXnOWLfu6/Kd+Z7vALUIYZK9+e8vCHqga209YXdy9QsUnILoqs?=
 =?us-ascii?Q?zPtNgWzxuu3PxHlvPH57bjHsEx2MSQ3WJKIE65S+AyA1MGM/FjRrASEIiZEh?=
 =?us-ascii?Q?EFWJ7ERZi7sWIgOVFiqsVDzULzKQv9l3ji5Rx6NX0ByVUC0hJE0pRW1KJvAk?=
 =?us-ascii?Q?4+CeeOBt4y4aAAbj2smEpS1+NQJ1pHqDxX/ZIns5qQHkrir8Xn5p8g//M5Zc?=
 =?us-ascii?Q?dIMVdSuZa+jI7RzaDH80RpxXci+exLQGO2UiH1shVSKC42hllV1rTKuBvo96?=
 =?us-ascii?Q?drY+aoqkOCyykGPMkoufMgaockZGAXolVmIqWQLrnnXCWHCbi1Clgz2jw6aP?=
 =?us-ascii?Q?DpTd6UyIFePNKz8ejs2gdYwbttHjapLZJXXURA7qrCkrYkfumTj80q1yL9/5?=
 =?us-ascii?Q?H+WMQpBO9dXyY6hp/+9wloHtjhW/IGksy9d9VHu/0Tq4iZoUStCsY1cS9M01?=
 =?us-ascii?Q?TucSd7isXL3wLByGZwX2sb+bqZHGsTUNzCXvcbBar6fSP42svqJ3YgBaFFUG?=
 =?us-ascii?Q?R7OdtR0lqnGP92t3ApMj2Zz+TTHIJxk+zZ5QdMAzpGjNh5Z+paLI6pwZc2wy?=
 =?us-ascii?Q?adUgN9xgUnz631t720B+bOGL8AeTPXGxVcrhrolGb91KYpypZbVrnwcieBC1?=
 =?us-ascii?Q?M5vM8s6X24PnSPtO9tjSS9Fw6M6coliXaMhNHF1l6eZsvrUjMlZbX34+/mPp?=
 =?us-ascii?Q?ym6EYGX2JBD+RBNv8uIeWuGc88c2U1sgs8mBAVqYHSdOd2mLtQfERPyjjnrK?=
 =?us-ascii?Q?NG3E7PC3aaxXejoLtwr1nrUX1hAXrJqPnpqeEwGyBI1Pg63+WtVXJp2mS8Lc?=
 =?us-ascii?Q?LXia4MK+rgzDFmpzYaVrVj8YWXF7ZbUt0Qnxw3TyJkRksCEPqvdRQ1J71UHU?=
 =?us-ascii?Q?i2JKo6JmZVOXUJTXTNArdii0lLHgwDLuDABx0OXubZXFA1Ey84tDq/TeYe/5?=
 =?us-ascii?Q?k4NjHVftyjILgooeFgGI9SYSen/828hte9tlKqP2QLmpZIvkGtNzHHjKETlh?=
 =?us-ascii?Q?hB+kZlYbE73qvkttYrfE9Syl4O8Ozi5mZQPeSz1bZa8GPsO2rTJXjW+AAZ1M?=
 =?us-ascii?Q?N5ew1d1gGELpXp0nCkkMsyDl34wPoS6Kz31a8NNwcrbraQQs0cJ5i5YOESc7?=
 =?us-ascii?Q?UZTszJRgiE9NSurwM+W0XaPR2BsINuMKd/fOwGGJ5NL/d1/whT+qBpgRmiUV?=
 =?us-ascii?Q?Yof4JF15Nu5kwYGu5/LVTrUtK70MzCUDsPWGM8Y7jmLL8jcawyMkoZPxHYRi?=
 =?us-ascii?Q?4EfRYsE1UXzg8O8XapNDNwYmFVj/zAM3ziZK5MW9Fs9gH/pnYjKjXCyctRji?=
 =?us-ascii?Q?+C/6ZycmaveqzfGPWWn9yvARsnClvUMipWM/cMj+AzctKW0gOX0hQWVKxWbE?=
 =?us-ascii?Q?z9peJILXlxiDccsd4iXDImIu7k45fJAMBBM9SBXg+l545FTmXYObXT76CRMU?=
 =?us-ascii?Q?/ug294Css4HvllS6/nes1M8p40Vn1+0Gx+kdST/qBFEH1tCLq+MhtBqeAm1/?=
 =?us-ascii?Q?Vk2xZgiCQjlIVO9kBprDnYjdCPA/8CyFuX5mwtYE/9FCTMKwXuX1g14nYSzg?=
 =?us-ascii?Q?cA=3D=3D?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: =?us-ascii?Q?VLLCvpfKsyebRb6oFrLu50lG8wlz/dZr2oCauHFhoSU6LGFXXkFBkaaQY4b+?=
 =?us-ascii?Q?Qi++rGueNm8eh+XeNRrT6JY9fmsWgTT7eMQEFwwz7rN0ESQrtAx/mNpwh6hJ?=
 =?us-ascii?Q?bGzprvYchaReRyFcQbbP6pmIZ2vyDZ62WAjLkuqmR1tvDcvjtc/5rcLkTm9x?=
 =?us-ascii?Q?Ka24fO7mtD53Y2hM+8gPNwnGJfdGb0LOjMezzmDXO+E1goejA6gVi/7vXmv8?=
 =?us-ascii?Q?bVnxwCRbxvWwpn4Lc3lhvsfZK6in98AfZ+TG4TFn3tw8u9WxtfBnEEfLDZO7?=
 =?us-ascii?Q?tp2yeoqza23ABC+vOv35nHQiuKA9XsSauUvXDiLvaVV6yZg6BiF/f3DOXdBT?=
 =?us-ascii?Q?NyIFu40nqV3vOcfVfGXCMO3pbeVKC3I8fW3/v+0Pogbku/4MPkET6+MQkzte?=
 =?us-ascii?Q?eeeLiOgWlUN5ANVts7P67uqcFEyK42K7aKWSB0a43KkrsZzq+PItkCGwrHe1?=
 =?us-ascii?Q?YcEUEDRScO/bPc1kBdUKcjbO2yxv2Dr2Q2Ded3yXLeWFTYIwP50Jb/wMri6W?=
 =?us-ascii?Q?f7laAU09yflqJXTG9o94jDDX4po8C8mSJD8jpzu7Gxrw3cE+oU6t/sVfbnah?=
 =?us-ascii?Q?9yatdr0AVRSlKJjFt7WRaIQJcMAi3jPgaE8spXuvY5eoSbNzrgVa+YkaT+mn?=
 =?us-ascii?Q?flXOYKhBb8Ttv8DktnoBwnI7xntZeV112MYwOdDli1Z/Qb+M+1MJ4Q2BM7BR?=
 =?us-ascii?Q?fcZUUwnb2TUlpvnplo2bh8HGb6gLeT0QTZZAX4dyJ4xOYJXQDkWxaJKpgeU0?=
 =?us-ascii?Q?sn2K1/jtP1eEHHNGN2siTc+Nn31E1cUVBo+09G3mhoTMbdhwE455SFk9qwnc?=
 =?us-ascii?Q?EWp/VkM8ef2XTTAYlfdCV+L+XkblXYD4sNQFGaDYNHgI8PdmMe0mTdVdLPCA?=
 =?us-ascii?Q?6xy7nlojVt+LNp2f48s7sTnVM6t9cf6Fpybm7kb3N40Vx7pyyEkEhbOvKt0w?=
 =?us-ascii?Q?f1YywCd5z/biWrjRSZMvZPi7shr3/YPOcd9zwnKjs27hIRYeG3y+bbhpdl/+?=
 =?us-ascii?Q?UnIevAr8u8PK3WUSNYksY+/eyvPx4MZ/yY/Wn6X8yR3G5ZzulBPSg46r7LoM?=
 =?us-ascii?Q?lfE1Dl1mqmMWUOZJR78r4D9uPOOIzQOQzx/5Ry4MnuXdYdw+yekI6LoeAYsj?=
 =?us-ascii?Q?OWN8Hk2DKbsMRPn0KWm0DHGDzKs0JfsznOWiHVZY1zwQyQcAAr+aPLM=3D?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5c23c744-bb18-4dba-7814-08db1e5f0828
X-MS-Exchange-CrossTenant-AuthSource: CO1PR10MB4531.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Mar 2023 16:22:51.2528
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: /tiCyj6jx62GpkVBPh3PlTl8QMstGzTxMR+/kYX/BjtJj4mBdgNGvh1g1E1HvE7U8ZTmncAaYTgLIIvydZg1SwUpcARkIA2tQXu/a7/3M7s=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR10MB6530
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.219,Aquarius:18.0.942,Hydra:6.0.573,FMLib:17.11.170.22
 definitions=2023-03-06_10,2023-03-06_01,2023-02-09_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 mlxlogscore=999
 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 malwarescore=0
 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2212070000 definitions=main-2303060144
X-Proofpoint-GUID: h59y_Jzw1KzktcExkOQbg5HzXgKko7Fq
X-Proofpoint-ORIG-GUID: h59y_Jzw1KzktcExkOQbg5HzXgKko7Fq
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

When a crash kernel is loaded via the kexec_file_load() syscall, the
kernel places the various segments (ie crash kernel, crash initrd,
boot_params, elfcorehdr, purgatory, etc) in memory. For those
architectures that utilize purgatory, a hash digest of the segments
is calculated for integrity checking. This digest is embedded into
the purgatory image prior to placing purgatory in memory.

This patchset updates the elfcorehdr on CPU or memory changes.
However, changes to the elfcorehdr in turn cause purgatory
integrity checking to fail (at crash time, and no vmcore created).
Therefore, this patch explicitly excludes the elfcorehdr segment
from the list of segments used to create the digest. By doing so,
this permits updates to the elfcorehdr in response to CPU or memory
changes, and avoids the need to also recompute the hash digest and
reload purgatory.

Signed-off-by: Eric DeVolder <eric.devolder@oracle.com>
Acked-by: Baoquan He <bhe@redhat.com>
---
 kernel/kexec_file.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kernel/kexec_file.c b/kernel/kexec_file.c
index ead3443e7f9d..14e55fbc1ad7 100644
--- a/kernel/kexec_file.c
+++ b/kernel/kexec_file.c
@@ -723,6 +723,12 @@ static int kexec_calculate_store_digests(struct kimage *image)
 	for (j = i = 0; i < image->nr_segments; i++) {
 		struct kexec_segment *ksegment;
 
+#ifdef CONFIG_CRASH_HOTPLUG
+		/* Exclude elfcorehdr segment to allow future changes via hotplug */
+		if (j == image->elfcorehdr_index)
+			continue;
+#endif
+
 		ksegment = &image->segment[i];
 		/*
 		 * Skip purgatory as it will be modified once we put digest
-- 
2.31.1