Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Eric DeVolder <eric.devolder@oracle.com>
To:     linux-kernel@vger.kernel.org, x86@kernel.org,
        kexec@lists.infradead.org, ebiederm@xmission.com,
        dyoung@redhat.com, bhe@redhat.com, vgoyal@redhat.com
Cc:     tglx@linutronix.de, mingo@redhat.com, bp@alien8.de,
        dave.hansen@linux.intel.com, hpa@zytor.com,
        nramas@linux.microsoft.com, thomas.lendacky@amd.com,
        robh@kernel.org, efault@gmx.de, rppt@kernel.org, david@redhat.com,
        sourabhjain@linux.ibm.com, konrad.wilk@oracle.com,
        boris.ostrovsky@oracle.com, eric.devolder@oracle.com
Subject: [PATCH v22 3/8] kexec: exclude elfcorehdr from the segment digest
Date:   Wed,  3 May 2023 18:41:40 -0400
Message-Id: <20230503224145.7405-4-eric.devolder@oracle.com>
In-Reply-To: <20230503224145.7405-1-eric.devolder@oracle.com>
References: <20230503224145.7405-1-eric.devolder@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?PomH+9eBxLMn/VuOs02VBDDSeEOaqw7GROntP0n1ecI5w5lU1/EVBAw76hPN?=
 =?us-ascii?Q?iHec1obBT3BxYj1vMs0lcV8OJOi2dbWCFvUcRcqPNCZEM9rBSVfL+RaS0HEj?=
 =?us-ascii?Q?iQlCrqx0JA4UgbDWo1gBojDMuu5V7gvrKfhsqMt0Gu/vAL1+CRAT8rrXqhgT?=
 =?us-ascii?Q?DDF5RYYsUVql7SnaOaMtxxIqpvl9mQquF8K62i+LIY+KVv+s+0q+EepSkzRO?=
 =?us-ascii?Q?Gj98o6uw/IwbmeSFtsUX5YtMUZXnhiVM6Qfe24fN9PJ2xSsBDDRwwSM86CI9?=
 =?us-ascii?Q?1La9m8eXlJ3I1fojqKCpl1icPd+7luQwnwj3b0pP7a4lRL5UDTE5SHO5ATuL?=
 =?us-ascii?Q?PthPgX+zGIpUa2KW6q3QzsXXBcm3oWnKCW2djVUbTOM5TYCe/U4JJjACRmFX?=
 =?us-ascii?Q?CcJdQtRjwnosZUG2PRuZPBUPbXfcNNag4PxqRlSlRn/xpzgnYemFqwziaOeI?=
 =?us-ascii?Q?o57niON+ISfEVjUjOyQnZTr79T46c08axUeh2UV4sd32CmF7KZRZGu2TQ05/?=
 =?us-ascii?Q?LZ4eDj4wukW+atzuNsxwN1TlXwsP0kRULFkKuAJWlLfEeQQiaFwICsXCM6RW?=
 =?us-ascii?Q?h3MB8ZWbDYN3IptLw3WXslGiYK3Psnu3lbbB4XXsPIgc9+AZ7CV8RzpJUDmg?=
 =?us-ascii?Q?kBCXaP6AWM7FsILxR8GP8mDDhqfG9dSgpr1bPT/CI7iZ2/PNUjC9ggo8dUgr?=
 =?us-ascii?Q?OdsV64aYTLRzY530esMlNyVQSOIP4XdiKWMB2eVVWwHCcCxN3TpkhcgPmsyz?=
 =?us-ascii?Q?kjYIKdnsl3+T9+mG93yLoowrThO19T6Ianr6xPDRv5QnmIdWcz56CEHsOqIH?=
 =?us-ascii?Q?RnpnQ1+A/bmGFN5nrxGWqE/JMKM2SOFRHuWPf6Dn1iSCQGcJoli1UucFtgat?=
 =?us-ascii?Q?s8By9SAKACOsvSTwNS1iWiZGpilL4FL/WN7C2fZ0dpKkVKdVkfkboXrGrNqR?=
 =?us-ascii?Q?jVC1jIhmv8DWFbaBptQuXAUulX4ngW/+9oylPexy0ZgTnDz3KUp+yknQsPSO?=
 =?us-ascii?Q?f6edoNOl/qQB0z+mSgb03jBK8StfDUPsXYC1hKpnWwTHMT7uTDhnKdP8j9fn?=
 =?us-ascii?Q?gMMn3zq01EbboPxJ+8dub17TRPYra9V1adir0RmpCBmXWA5D2XvSSp1wlO46?=
 =?us-ascii?Q?V3cDjwz6E4cHaJzDjYNRenzUxeSjplIgluhpx0nFip56M9XXYulzpYEfT4I/?=
 =?us-ascii?Q?0altcmsNTeQffQMPoJVXuXpZ/+t7EAPAFSurQFtOBZ51UfeTx4qNKj35om/L?=
 =?us-ascii?Q?J/SGvmPPDKSlazuPnhr43qxf11Zy1BASipeMG1SuHW5aMuuXLOdHy9NJX+da?=
 =?us-ascii?Q?uSwl3suNesAk88TNn7FB/OWg9s5uXjncs6bIgDu+zKqL+GzI6KUOhVQYqfp3?=
 =?us-ascii?Q?vJXXpvnyiVSEZ+UJ/tNmC4yX1kub8yKPYzkp0ER6pJM6H12JzLF5RFthB8q8?=
 =?us-ascii?Q?g9gN6Jdvu/t8AZH2dbNaaM7p7zXpDhmqSqOQi0c/D/SVL9+W6Ay/5jq/Hu22?=
 =?us-ascii?Q?0IzayrFsDolZ7b+bA0nHMqtDoYciK+cHiNZ8Y0eP85UZFXHRF5j7Bsbagbzq?=
 =?us-ascii?Q?8i5y6P1WshYGENkhtHJfLE2MsuOAgFtjVQcda4pK22MhANEaGMU3wcLb3HrJ?=
 =?us-ascii?Q?mw=3D=3D?=
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: =?us-ascii?Q?LXZg3LX9phN91aOiktQpU+ImE7a+2QKWVNd8VsGvNKHB3mXieYls3GiIzxA5?=
 =?us-ascii?Q?15fcV9JwGwyecuNZ93+wst7E8aeOdaA9fjSYq0sZqxzofHfA/J4llwOb/U6T?=
 =?us-ascii?Q?c7FfYFSQj3p1lI33hEVJ79mcZyIT9zZgngqY7Qs6oxV6FZA4v8d65+IY8AkC?=
 =?us-ascii?Q?oZyfRCPD7v2icEdw9eKHFBgLzUkOPbobUs9Ib8LDpf4KI/uQQLpyPiML171i?=
 =?us-ascii?Q?MhtdsBlba6yb/LysqCxAjFUvkaxPMchsm1lXK8NeMw95mgZ9xKSUboQJVUex?=
 =?us-ascii?Q?Qzp1geJ4vA+pHkMl3I8GyWEDph13ysXQRxtSMB0DkbkRoDrSqpMpOwNWVSLX?=
 =?us-ascii?Q?AiHvl+C4gjnnXh/gUxKeT6z2l4kcoaTxPKm+VSDhMubP/Cbtddey9LCZjHVt?=
 =?us-ascii?Q?Oxb5sSpEz2GPUElDK8e+6vlSXgdtUPe49ZRIP6yuBGuz2nfjSmrkY+JbMt8V?=
 =?us-ascii?Q?LA24y4e0teIHFXA05u1ocy+ykhnYOK8YtBU1uWbFTrkpLPr6CnkCGZzoDas9?=
 =?us-ascii?Q?MvGhxi9yj30mgqfvZ0d5pR7hr5Jiqr5GFlduxc9zIMQ8mHtT1dmPcelsOqpf?=
 =?us-ascii?Q?FRjhCMmNSzN2t7S8giTzWfo1dWrCJUmZPky57aLEns4R3dkyucUt8ECrNLY/?=
 =?us-ascii?Q?pR+647irrBdqA724SQrEuM+mK374lXQA/DjtAafU0RPueQHG2eSzmjIQLHxl?=
 =?us-ascii?Q?n7IRhg1u+Y1PLrarlGhBVERd4J7gMMbOLp5GV51bgIgfhautpGMgDklADL9N?=
 =?us-ascii?Q?sMUWti9nLLjWJI/0Pra/jcdNFOOzVh5gfPGJZIIiCXOgNRQMFU4Y8LdKZwU3?=
 =?us-ascii?Q?t9q16XZyHpzleDS3iryjBdOeuuwwxFRbmWnFQM50xjlLpSwUNd41cpyHL5e2?=
 =?us-ascii?Q?8HiBFt2B2iNtn41sPK9iyuXHPRFtWvBx/PUUUeFYxUbwrjaXW5gtl0rPUofr?=
 =?us-ascii?Q?VFJTUzrifIxmAdMd7SKankmeBS3Fu2vhy9jJ/NGSb106rBv4FrqVw8lngNyJ?=
 =?us-ascii?Q?WD2XmDBq2X2mVn7J0gk39h7TTvD/KdTzfIi0p2CSl/7r8zmTelki0H6+YMiM?=
 =?us-ascii?Q?/uO5tuuiPg1vmcL/pfDPwAvKzKliOPXJndK7S5kYyfilYlpZzb0O2VDDcaoZ?=
 =?us-ascii?Q?gEOkvawx9C05mgL6ASHHSey7a12Hy1/C4c8waoy2IKefJUQsg91IC5k=3D?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6237b4e8-b2c1-4995-acae-08db4c279b87
X-MS-Exchange-CrossTenant-AuthSource: CO1PR10MB4531.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 May 2023 22:42:00.2478
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: X9a/mh41fiteFPhV4nnSjLhgWe3Ym5iKIJCkNT41vSeoSJsDBYpC5nFCNjwmFZoAnYvTA3MqmOqvsmPO3r4YA4V1yE750JIDXKOXIB6VQZc=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR10MB6846
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.254,Aquarius:18.0.942,Hydra:6.0.573,FMLib:17.11.170.22
 definitions=2023-05-03_14,2023-05-03_01,2023-02-09_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 mlxlogscore=999
 phishscore=0 bulkscore=0 suspectscore=0 mlxscore=0 spamscore=0
 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2303200000 definitions=main-2305030195
X-Proofpoint-GUID: wbSM3OJjngqUbsQKSlk6MzeHxoosZ0uc
X-Proofpoint-ORIG-GUID: wbSM3OJjngqUbsQKSlk6MzeHxoosZ0uc
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE
        autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

When a crash kernel is loaded via the kexec_file_load() syscall, the
kernel places the various segments (ie crash kernel, crash initrd,
boot_params, elfcorehdr, purgatory, etc) in memory. For those
architectures that utilize purgatory, a hash digest of the segments
is calculated for integrity checking. This digest is embedded into
the purgatory image prior to placing purgatory in memory.

This patchset updates the elfcorehdr on CPU or memory changes.
However, changes to the elfcorehdr in turn cause purgatory
integrity checking to fail (at crash time, and no vmcore created).
Therefore, this patch explicitly excludes the elfcorehdr segment
from the list of segments used to create the digest. By doing so,
this permits updates to the elfcorehdr in response to CPU or memory
changes, and avoids the need to also recompute the hash digest and
reload purgatory.

Signed-off-by: Eric DeVolder <eric.devolder@oracle.com>
Reviewed-by: Sourabh Jain <sourabhjain@linux.ibm.com>
Acked-by: Baoquan He <bhe@redhat.com>
---
 kernel/kexec_file.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/kernel/kexec_file.c b/kernel/kexec_file.c
index f8b1797b3ec9..1d2cfc869a75 100644
--- a/kernel/kexec_file.c
+++ b/kernel/kexec_file.c
@@ -726,6 +726,12 @@ static int kexec_calculate_store_digests(struct kimage *image)
 	for (j = i = 0; i < image->nr_segments; i++) {
 		struct kexec_segment *ksegment;
 
+#ifdef CONFIG_CRASH_HOTPLUG
+		/* Exclude elfcorehdr segment to allow future changes via hotplug */
+		if (j == image->elfcorehdr_index)
+			continue;
+#endif
+
 		ksegment = &image->segment[i];
 		/*
 		 * Skip purgatory as it will be modified once we put digest
-- 
2.31.1