Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Eric DeVolder <eric.devolder@oracle.com>
To:     linux-kernel@vger.kernel.org, x86@kernel.org,
        kexec@lists.infradead.org, ebiederm@xmission.com,
        dyoung@redhat.com, bhe@redhat.com, vgoyal@redhat.com
Cc:     tglx@linutronix.de, mingo@redhat.com, bp@alien8.de,
        dave.hansen@linux.intel.com, hpa@zytor.com,
        nramas@linux.microsoft.com, thomas.lendacky@amd.com,
        robh@kernel.org, efault@gmx.de, rppt@kernel.org, david@redhat.com,
        sourabhjain@linux.ibm.com, konrad.wilk@oracle.com,
        boris.ostrovsky@oracle.com, eric.devolder@oracle.com
Subject: [PATCH v21 3/7] kexec: exclude elfcorehdr from the segment digest
Date:   Tue,  4 Apr 2023 14:03:22 -0400
Message-Id: <20230404180326.6890-4-eric.devolder@oracle.com>
In-Reply-To: <20230404180326.6890-1-eric.devolder@oracle.com>
References: <20230404180326.6890-1-eric.devolder@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Ifhn6AZrNc43qE02fM92plEOvymZQJ4IIxW5gvQ9Hz/1O6vH+V4CnL8VVbru?=
 =?us-ascii?Q?4+DNus3TqbwHK2PV0FtnnnAubiW0eqsJUPpgW0Z4xyjL+tjP2RSCNCW63cqB?=
 =?us-ascii?Q?3AIFsdXctcWdk6vEikMuRYCInpiIAASQVNPfQklmeY+0/GeKvAlE3g9+xACb?=
 =?us-ascii?Q?vNrKp6CXxkgcPC8N8cfEB96oO12H8g5fQGPSREaOdY2WjkLQvLGzmD9NnPo5?=
 =?us-ascii?Q?g0v2hCwtr1vBCg/Mqv0LuXuf7sTiXPBZpSbZJWpuNTT4ddqUdwB3PBxidGsX?=
 =?us-ascii?Q?pB0cl7tEkT0+fflDM2KC49UImY+WcMEO+akxzr5R+9d2TJoWXjmITFlhklFI?=
 =?us-ascii?Q?8bE9A8bWt4KpUe3CMIVVGFZghq5uMGcSCeYCzch5Dv3RvcC5rIjcQiaeSbyr?=
 =?us-ascii?Q?l1mvNuYgTCljcvnyZZfTPR0JEo4DqeICd8gXtNy9ePCC5j5E70F7LMzbRjDq?=
 =?us-ascii?Q?+6ZiBChkqm8K4JQzBJ80F0gjmgn6NhntKuAIome1mGkRJ4kv1VvsyKip9rpE?=
 =?us-ascii?Q?71Vag6zpORuUbCcp7e6Zrb+rUzDMAnMslgfHD9jcXBMknM+V4JKgLXV/DkJN?=
 =?us-ascii?Q?Mt7CCksLpQXNn5RfMR/nq7zHlurQoWZjkPAydU7IELR9xQR81pQA70IWqUiJ?=
 =?us-ascii?Q?3yTOP0XnqTToeOUq1Zquc+W8j0OHX9JBCPYG4mcI3SZA8V4mZ0meALWtSd2r?=
 =?us-ascii?Q?wFLYuqQt0MxZQ6Nne1zO9y/0xFi+fEDPwPRUxoWHHLwT2FB+kgNOd5sx8Rrl?=
 =?us-ascii?Q?pALIr5Izk8jBWF43C/jiOHsb04A2FAetuv/RyUWcJ/lx4RAf6/A1DIEQrT6x?=
 =?us-ascii?Q?YbK6STx1tGWKxICAQeKsErXWRF2J8YNpT+MTVplIhlcE1/+CJuuSkO9bvxva?=
 =?us-ascii?Q?Zy496Yl8Z6gm7bb44IrT/YPChwRKsqnj8bo2vU3q3wm7rnUjFLE/EFa8fHNG?=
 =?us-ascii?Q?b7ev4mZBkO/cOptjVV7Aefd8R3Qt/zARgfTFsPcoUiBfEhB6FOxjb0aoP1zr?=
 =?us-ascii?Q?TFt56zku6tc/mJgcZroWAqywyU7lQFQ7F0YlSRHb8YncWU1pAADaweNZsXBR?=
 =?us-ascii?Q?bjmQZ2JdefUHCsd4gBu7RJCOs0M/4LsAuGFhHpsewlOGeD7FVJa7b18+7GeA?=
 =?us-ascii?Q?uOwhu9t7wwshVTcVPuhtwHhuICTs1eRljkOey9BnxMKryU8FxrfHNov7DPVN?=
 =?us-ascii?Q?ALlhO9Hi72eR+e/sF7bsqR1hUEse+xSOlY9eUD2+0MWeteNamnp4bBkEigH2?=
 =?us-ascii?Q?pb1ntBLoQ3I3Q+MWhmiCzBREX4GoemB2tqwxtbrZHHzOAHqzFGHOLA7Mm0tq?=
 =?us-ascii?Q?oc0ssFMqGLjN1kJzfaMsGIy9iHOJIV7I78oX10dQBzRPt2/HxEjaxKoWp+n6?=
 =?us-ascii?Q?qI3sYDYb36mSzFBgjAw/B5mmZAP0st1ucXcwQjeefB8aYPBz3tAnlc2u6sI/?=
 =?us-ascii?Q?IjZUS1tWgNISHhjbrN5UtH76xKXfl2dcCI9mDWNRX1JZUKQ/7G+zv8WzI61p?=
 =?us-ascii?Q?qyrfWi30fmNjk0fJCGx6KSH4LssRsgHN763J+0knUw64LcrBBa90njcwrlHy?=
 =?us-ascii?Q?ww5irDwyqC2UqWfFVHT+XspFCiDy0nI7GYGnsrZzxjcW/HfMdpA7Pfh4hZAP?=
 =?us-ascii?Q?kQ=3D=3D?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: =?us-ascii?Q?nOXe4M3Al2y7FR789SzqOkWIqbRUbJiyctgYiQFqrvGwp6KBEBUu1VO2STit?=
 =?us-ascii?Q?2+lSyvUvKzQAWvNncjt0fY/rbMjq+46nbgUvN8SLXbtM+99dFFoagGICgRkS?=
 =?us-ascii?Q?opbvbE1M2UcbUyg3GFJcmFKrBH20EoLIQRQYBckhcfD0B741jRcg1NMv+VGS?=
 =?us-ascii?Q?vqAbzmT8F91MM6JjdEMHOowA+jKDMPcB1wserCm8+bMlfDQ3symFvb+OESgy?=
 =?us-ascii?Q?oixEJuNweOoJpE1MH7w99g+p5U/0607TQR1MPuQWuenVFrGYDtUP1VQwDN5W?=
 =?us-ascii?Q?px0VgEOoEwviRXbb/8Qh8AaemajwEXq54dDJWXxd0qfo47oz9+3nsx5yL+lf?=
 =?us-ascii?Q?vhLNt8IO8FSZkhMAFW2PLXJCUwXykWRnWb5hqWx3ERaZxhuSwsq6YHdyEJJd?=
 =?us-ascii?Q?8TCnMDZyw6mjvS4HlTQdV8GxLtfakBpLGAYQ3DThDCXFUfLqjajHVqt7Oi9g?=
 =?us-ascii?Q?/vVLI7cwCxvgFK+SHKr2ZpNmhQ7PIxjjk3F2uL5owvQ7QTFAxqPp0gh0UpqB?=
 =?us-ascii?Q?R7c45dP1Y2lLJSt6jhvbElhScQj4o0ZwqgCHrHu3bbbuDEKU2zyknVf/Ux0e?=
 =?us-ascii?Q?6yLSyKHkdHdpjDYymSyDdFTSmE7Co7rR/6CLnbd04fDpCmNGHywJ7Rf/aTr0?=
 =?us-ascii?Q?haLkOZbTAj+7e8plkWgOWsj7qyB4X3xziRpNqGgXm5c5VGyB9Xo3MsaRlQFf?=
 =?us-ascii?Q?7L8F7g6qdALkEAOVh6lUaqjuvDVmNW94S5f3EglleNArxWAKXv/BUfr/6iby?=
 =?us-ascii?Q?5r3OU2gw+KZTVDbFrWMW7fw+vykN/x++c4sNX5e3dRh50rsV8Lym1uWqz5NC?=
 =?us-ascii?Q?KhtvJFguw5ze4tRkdwPMbfRPGEzL7E5x9g+qmVqzyFBVNIY24qnwvxGv5M+5?=
 =?us-ascii?Q?5GEx97PYkVW8jXBsL0ajFuf6HC85Jo6gHAvq08XdUn/DtWQWphDlrBzPe4Hf?=
 =?us-ascii?Q?GOdeqW+lo6GC9KpuXMxdw68dutQuX6PpyT1SYCuKP+0BiQYEvr3/rs1wgK/I?=
 =?us-ascii?Q?fkRFfo/YtLNliT7BdJbJ0QM7Hv+CV612Ov/BoZmxHuvLS+/Y+rNZG2QoRXzf?=
 =?us-ascii?Q?L7BSm57roBFLcccILM6C+v4uOBTTJZJw5pKXddudZTOhfmTubBNeltnsny9o?=
 =?us-ascii?Q?lPueq1CHMuzRLGjsdUyF5lIV9T65x51h7ix8Re2Xd0WzIlp/Bk8JQ9g=3D?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: cedbf88f-1730-4bbd-74be-08db3536f482
X-MS-Exchange-CrossTenant-AuthSource: CO1PR10MB4531.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Apr 2023 18:03:55.1918
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 77WfkS3rbTfObXsFO47hphh/OhRCP0fIMIJEjbZJCNef2rlFsaGFyBDXxhy1+QH3UYKUfUQy7EZ0T9APO/2pUnwFq4T31wbb/iKDea9PcpE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0PR10MB5909
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.942,Hydra:6.0.573,FMLib:17.11.170.22
 definitions=2023-04-04_09,2023-04-04_05,2023-02-09_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 adultscore=0
 phishscore=0 bulkscore=0 mlxscore=0 suspectscore=0 spamscore=0
 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2303200000 definitions=main-2304040165
X-Proofpoint-GUID: pmsHazm3FQ0abuPg5_Q2vOw1tESsERgb
X-Proofpoint-ORIG-GUID: pmsHazm3FQ0abuPg5_Q2vOw1tESsERgb
X-Spam-Status: No, score=-0.9 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
        DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H2,
        SPF_HELO_NONE,SPF_NONE autolearn=unavailable autolearn_force=no
        version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

When a crash kernel is loaded via the kexec_file_load() syscall, the
kernel places the various segments (ie crash kernel, crash initrd,
boot_params, elfcorehdr, purgatory, etc) in memory. For those
architectures that utilize purgatory, a hash digest of the segments
is calculated for integrity checking. This digest is embedded into
the purgatory image prior to placing purgatory in memory.

This patchset updates the elfcorehdr on CPU or memory changes.
However, changes to the elfcorehdr in turn cause purgatory
integrity checking to fail (at crash time, and no vmcore created).
Therefore, this patch explicitly excludes the elfcorehdr segment
from the list of segments used to create the digest. By doing so,
this permits updates to the elfcorehdr in response to CPU or memory
changes, and avoids the need to also recompute the hash digest and
reload purgatory.

Signed-off-by: Eric DeVolder <eric.devolder@oracle.com>
Reviewed-by: Sourabh Jain <sourabhjain@linux.ibm.com>
Acked-by: Baoquan He <bhe@redhat.com>
---
 kernel/kexec_file.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kernel/kexec_file.c b/kernel/kexec_file.c
index 0b560064579e..a28f01318a47 100644
--- a/kernel/kexec_file.c
+++ b/kernel/kexec_file.c
@@ -726,6 +726,12 @@ static int kexec_calculate_store_digests(struct kimage *image)
 	for (j = i = 0; i < image->nr_segments; i++) {
 		struct kexec_segment *ksegment;
 
+#ifdef CONFIG_CRASH_HOTPLUG
+		/* Exclude elfcorehdr segment to allow future changes via hotplug */
+		if (j == image->elfcorehdr_index)
+			continue;
+#endif
+
 		ksegment = &image->segment[i];
 		/*
 		 * Skip purgatory as it will be modified once we put digest
-- 
2.31.1