Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::3:5 as permitted sender) client-ip=2620:137:e000::3:5;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates
 63.35.35.123 as permitted sender) receiver=protection.outlook.com;
 client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
 pr=C
Authentication-Results-Original: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=arm.com;
Date:   Fri, 27 Oct 2023 17:48:55 +0100
From:   "Szabolcs.Nagy@arm.com" <Szabolcs.Nagy@arm.com>
To:     "Edgecombe, Rick P" <rick.p.edgecombe@intel.com>,
        "broonie@kernel.org" <broonie@kernel.org>,
        "debug@rivosinc.com" <debug@rivosinc.com>
Cc:     "dietmar.eggemann@arm.com" <dietmar.eggemann@arm.com>,
        "keescook@chromium.org" <keescook@chromium.org>,
        "shuah@kernel.org" <shuah@kernel.org>,
        "brauner@kernel.org" <brauner@kernel.org>,
        "dave.hansen@linux.intel.com" <dave.hansen@linux.intel.com>,
        "mgorman@suse.de" <mgorman@suse.de>,
        "vincent.guittot@linaro.org" <vincent.guittot@linaro.org>,
        "fweimer@redhat.com" <fweimer@redhat.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "catalin.marinas@arm.com" <catalin.marinas@arm.com>,
        "hjl.tools@gmail.com" <hjl.tools@gmail.com>,
        "rostedt@goodmis.org" <rostedt@goodmis.org>,
        "mingo@redhat.com" <mingo@redhat.com>,
        "tglx@linutronix.de" <tglx@linutronix.de>,
        "vschneid@redhat.com" <vschneid@redhat.com>,
        "bristot@redhat.com" <bristot@redhat.com>,
        "will@kernel.org" <will@kernel.org>,
        "hpa@zytor.com" <hpa@zytor.com>,
        "peterz@infradead.org" <peterz@infradead.org>,
        "jannh@google.com" <jannh@google.com>,
        "bp@alien8.de" <bp@alien8.de>,
        "bsegall@google.com" <bsegall@google.com>,
        "linux-kselftest@vger.kernel.org" <linux-kselftest@vger.kernel.org>,
        "linux-api@vger.kernel.org" <linux-api@vger.kernel.org>,
        "x86@kernel.org" <x86@kernel.org>,
        "juri.lelli@redhat.com" <juri.lelli@redhat.com>
Subject: Re: [PATCH RFC RFT 2/5] fork: Add shadow stack support to clone3()
Message-ID: <ZTvp94vCTD6YzEfd@arm.com>
References: <20231023-clone3-shadow-stack-v1-0-d867d0b5d4d0@kernel.org>
 <20231023-clone3-shadow-stack-v1-2-d867d0b5d4d0@kernel.org>
 <dc9a3dd544bbf859142c5582011a924b1c1bf6ed.camel@intel.com>
 <8b0c9332-ba56-4259-a71f-9789d28391f1@sirena.org.uk>
 <2ec0be71ade109873445a95f3f3c107711bb0943.camel@intel.com>
 <807a8142-7a8e-4563-9859-8e928156d7e5@sirena.org.uk>
 <ZTrOw97NFjUpANMg@debug.ba.rivosinc.com>
 <ZTuj565SqIb9KjQr@arm.com>
 <b2ae41fd9a9f05269c7ffcd10565942acbab2c16.camel@intel.com>
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <b2ae41fd9a9f05269c7ffcd10565942acbab2c16.camel@intel.com>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
NoDisclaimer: true
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB9PR08MB7179.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(39860400002)(346002)(366004)(396003)(376002)(136003)(230922051799003)(1800799009)(186009)(451199024)(64100799003)(2906002)(41300700001)(38100700002)(6666004)(54906003)(66946007)(66476007)(110136005)(66556008)(2616005)(6512007)(316002)(6486002)(6506007)(83380400001)(86362001)(5660300002)(36756003)(4326008)(7416002)(478600001)(8676002)(8936002)(26005);DIR:OUT;SFP:1101;
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU5PR08MB10801
Original-Authentication-Results: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM3PEPF0000A795.eurprd04.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 7ca05481-7c32-4f03-f309-08dbd70ca3f8
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123;CTRY:IE;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:64aa7808-outbound-1.mta.getcheckrecipient.com;PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com;CAT:NONE;SFS:(13230031)(4636009)(376002)(396003)(346002)(136003)(39860400002)(230922051799003)(82310400011)(64100799003)(451199024)(186009)(1800799009)(36840700001)(40470700004)(46966006)(40460700003)(40480700001)(70586007)(36756003)(6512007)(478600001)(6666004)(336012)(2616005)(107886003)(26005)(8676002)(4326008)(8936002)(5660300002)(2906002)(41300700001)(6506007)(6486002)(110136005)(54906003)(316002)(450100002)(356005)(82740400003)(81166007)(86362001)(47076005)(83380400001)(36860700001)(70206006);DIR:OUT;SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Oct 2023 16:49:18.8426
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: dbfe3d0c-4887-4567-62cd-08dbd70ca9b2
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d;Ip=[63.35.35.123];Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM3PEPF0000A795.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAVPR08MB9625
X-Spam-Status: No, score=-0.7 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,
	SPF_PASS,UNPARSEABLE_RELAY autolearn=unavailable autolearn_force=no
	version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on groat.vger.email
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org
X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (groat.vger.email [0.0.0.0]); Fri, 27 Oct 2023 09:49:46 -0700 (PDT)

The 10/27/2023 15:55, Edgecombe, Rick P wrote:
> Do you have any updated plans to share around your earlier ideas for
> token schemes that try to shoot for more compatibility or security?

not really.

i don't like that shadow stack overflow cannot be handled,
so we have to allocate huge shadow stacks to avoid overflow.

i had ideas how to handle overflow with sigaltstack, but it
is complicated (unwinding, longjmp, swapcontext,..) so
"allocate huge shadow stack" is currently our best design.

the compatibility issues i see:
- dlopen of incompatible lib (multi thread case)
- makecontext shadow stack leaks (userspace api issue)
- huge shadow stack runs into resource limits
- hand crafted stack switching code needs updates
- minor issues around sigaltstack + swapcontext

i don't have an alternate design that makes these go away.
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.