Received: by 2002:a05:7412:da14:b0:e2:908c:2ebd with SMTP id fe20csp637428rdb; Fri, 6 Oct 2023 14:03:05 -0700 (PDT) X-Google-Smtp-Source: AGHT+IGpwsInZ9JB0IwFd+y+FaTIwJyBlnmX7DAAFmwR+ZIxOKlIaFtspzjPj/hy5dg+MC4LFvDu X-Received: by 2002:a17:90b:1041:b0:274:cf7e:f11c with SMTP id gq1-20020a17090b104100b00274cf7ef11cmr10529710pjb.19.1696626185102; Fri, 06 Oct 2023 14:03:05 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1696626185; cv=none; d=google.com; s=arc-20160816; b=kfc8PI0sTUVlGjgsdg0zBc5gukoaKcfkkhIZOv4V0CPjDT+WBvLKLHxxRoVkr6RjOF KiHRRv/JobtBq/H/tJxuWuq5hdstJD/q2LTz2dmGKUEbAsr7mDopX37w64iWRZmE8oCO wKonx/qCXUBI6W3ryz2zY2PYQlvZY077+l/1FzR3UnGP+WDVO+BstBRMArrtjvyory+3 QmxYo97MmXvPRtieTReTK7TVGTeF21Pxf5EClCCRN19n66NS1QmY6KbN3MNM1oaFPJqj 7QW9BHwXQyKCy0yLyOfGfALKZFmDrG7H8koAxZVqzWWYquU22RKF7LL219u6xDFdUmNK LPCA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=PqZ5QY6B9K2kKUBS5E33ySRPOeFko8feAKZCONUpe0Y=; fh=nJfCUWqjxSCtn2B86MjjXQBs/ZYWcPK17KVhg8Blk8o=; b=z3dc1jyEDh5sFQjUoaMGYiXay0j/iK6DzjLqvg5THBOOsqHmuLvXFHU3azm83OQWup bZyvr091hDY7JLhI0JWoSncgkpHLQTHM7ok6H7xmFxmyW6XC+oUBdQOHXLwp2XJKEj3X S4eOk0gWNlpx/RmSlrCmT/pOi14LD5pl2fNmv7uL+lR7pawVcp02TCr1yjMjsmnvtkgc eQr/tD3iFw/PGxQqO5YbfADVliYeJz7wvuj9mPIBkSaIP1QuSizGgNu1KF49ku4Xpf9P 0HdWv82kLjWh0u3jfs2fD9d4gvmWN3X7LL/VNxi/+U/QVhq+G3pz8hJLDJk0oZCKHh+E BVAg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=krVLzjFC; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.32 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from agentk.vger.email (agentk.vger.email. [23.128.96.32]) by mx.google.com with ESMTPS id e7-20020a170902cf4700b001c78345f376si4319469plg.241.2023.10.06.14.03.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Oct 2023 14:03:05 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.32 as permitted sender) client-ip=23.128.96.32; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=krVLzjFC; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.32 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: from out1.vger.email (depot.vger.email [IPv6:2620:137:e000::3:0]) by agentk.vger.email (Postfix) with ESMTP id C602B8135CEC; Fri, 6 Oct 2023 14:03:02 -0700 (PDT) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.103.10 at agentk.vger.email Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233580AbjJFVCy (ORCPT + 99 others); Fri, 6 Oct 2023 17:02:54 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:36720 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233541AbjJFVCx (ORCPT ); Fri, 6 Oct 2023 17:02:53 -0400 Received: from mgamail.intel.com (mgamail.intel.com [192.55.52.93]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 58A26BD; Fri, 6 Oct 2023 14:02:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1696626171; x=1728162171; h=date:from:to:cc:subject:message-id:references: mime-version:in-reply-to; bh=G5qi6qjPHLO8785ySsNeRiEUjzb2UW4Fd5UOqVqDpg0=; b=krVLzjFCXVXEZGn+a6c02CzYuofofpX4C8k2drC+QEz6tcLO0dBg+u+N a113f2EFE3b3tYwB/52RAgjTopoerQJghxTJlz5/mxqloP577pQhwR08L oho/vksztv5zirClzAPchaXkbZokONexJ16ALJNgrl4ABfHaplvufDxnS olj4yHCNPMr6tzdGMOXJdXeJDuqvA5rCm+CwJreDaPnCMikP+p6w8QKLE TG7npQ+vlcFQz7njOFCHOYtmwWqjYDRqkoPmTipKWDVeGoBjQDx/UQsVK qmC6sopozugPwuUordFA3Na5zdT+2TUfZ5UC+d0kmnAAEKZTiVpuBdGOi w==; X-IronPort-AV: E=McAfee;i="6600,9927,10855"; a="381109600" X-IronPort-AV: E=Sophos;i="6.03,204,1694761200"; d="scan'208";a="381109600" Received: from fmsmga007.fm.intel.com ([10.253.24.52]) by fmsmga102.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 06 Oct 2023 14:02:50 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6600,9927,10855"; a="755980699" X-IronPort-AV: E=Sophos;i="6.03,204,1694761200"; d="scan'208";a="755980699" Received: from pmanogar-mobl.gar.corp.intel.com (HELO intel.com) ([10.213.157.100]) by fmsmga007-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 06 Oct 2023 14:02:35 -0700 Date: Fri, 6 Oct 2023 23:02:29 +0200 From: Andi Shyti To: Kees Cook Cc: Jani Nikula , Joonas Lahtinen , Rodrigo Vivi , Tvrtko Ursulin , David Airlie , Daniel Vetter , "Gustavo A. R. Silva" , John Harrison , Matthew Brost , Michal Wajdeczko , Matt Roper , intel-gfx@lists.freedesktop.org, dri-devel@lists.freedesktop.org, linux-hardening@vger.kernel.org, Nathan Chancellor , Nick Desaulniers , Tom Rix , Andi Shyti , Nirmoy Das , Jonathan Cavitt , Fei Yang , linux-kernel@vger.kernel.org, llvm@lists.linux.dev Subject: Re: [PATCH] drm/i915/guc: Annotate struct ct_incoming_msg with __counted_by Message-ID: References: <20231006201744.work.135-kees@kernel.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20231006201744.work.135-kees@kernel.org> X-Spam-Status: No, score=2.8 required=5.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, RCVD_IN_SBL_CSS,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on agentk.vger.email Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (agentk.vger.email [0.0.0.0]); Fri, 06 Oct 2023 14:03:02 -0700 (PDT) X-Spam-Level: ** Hi Kees, On Fri, Oct 06, 2023 at 01:17:45PM -0700, Kees Cook wrote: > Prepare for the coming implementation by GCC and Clang of the __counted_by > attribute. Flexible array members annotated with __counted_by can have > their accesses bounds-checked at run-time via CONFIG_UBSAN_BOUNDS (for > array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family > functions). > > As found with Coccinelle[1], add __counted_by for struct ct_incoming_msg. > > Cc: Jani Nikula > Cc: Joonas Lahtinen > Cc: Rodrigo Vivi > Cc: Tvrtko Ursulin > Cc: David Airlie > Cc: Daniel Vetter > Cc: "Gustavo A. R. Silva" > Cc: John Harrison > Cc: Matthew Brost > Cc: Michal Wajdeczko > Cc: Matt Roper > Cc: intel-gfx@lists.freedesktop.org > Cc: dri-devel@lists.freedesktop.org > Cc: linux-hardening@vger.kernel.org > Link: https://github.com/kees/kernel-tools/blob/trunk/coccinelle/examples/counted_by.cocci [1] > Signed-off-by: Kees Cook Reviewed-by: Andi Shyti Andi