From: Alexander Popov Subject: Re: [GIT PULL] gcc-plugin updates for v4.19-rc1 Date: Fri, 17 Aug 2018 01:18:10 +0300 Message-ID: <43da98d0-409b-88b9-0178-a79b581fc044@linux.com> References: <20180813214328.GA15137@beast> Reply-To: alex.popov@linux.com Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Cc: Linux Kernel Mailing List , Dave Hansen , Ingo Molnar , Masahiro Yamada , Thomas Gleixner , Tycho Andersen , Mark Rutland , Laura Abbott , Will Deacon , Herbert Xu , linux-crypto To: Kees Cook , Linus Torvalds Return-path: In-Reply-To: Content-Language: en-US Sender: linux-kernel-owner@vger.kernel.org List-Id: linux-crypto.vger.kernel.org Hello, On 15.08.2018 23:56, Kees Cook wrote: > On Wed, Aug 15, 2018 at 1:18 PM, Linus Torvalds > wrote: >> I absolutely refuse to take any hardening patches at all that have >> BUG() or panic() or similar machine-killing in it. > > Okay, mental model adjusted. :) It was only "strong discouraged" until now. > >> I thought VLA's were mostly gone. ... > And after that, there's a single patch to move -Wvla up into the > top-level Makefile: > > https://patchwork.kernel.org/patch/10489873/ > > So, we're basically done I've just sent the 15th version of the series with changes according to the feedback from Linus: 1. BUG_ON() in stackleak_erase() is safely eliminated; 2. Stack Clash detection (alloca() check) is completely dropped, since global '-Wvla' should arrive soon. stackleak_check_alloca() for arm64 is dropped as well in a separate commit. This version is rebased onto Linus' tree. Best regards, Alexander