From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.1 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,SIGNED_OFF_BY,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1DB75C433E3 for ; Fri, 31 Jul 2020 23:18:44 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id EA034207EA for ; Fri, 31 Jul 2020 23:18:43 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=chromium.org header.i=@chromium.org header.b="DMIGjUeC" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727797AbgGaXSn (ORCPT ); Fri, 31 Jul 2020 19:18:43 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:47324 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727812AbgGaXSR (ORCPT ); Fri, 31 Jul 2020 19:18:17 -0400 Received: from mail-pg1-x543.google.com (mail-pg1-x543.google.com [IPv6:2607:f8b0:4864:20::543]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 36144C0617A3 for ; Fri, 31 Jul 2020 16:18:15 -0700 (PDT) Received: by mail-pg1-x543.google.com with SMTP id m22so16781350pgv.9 for ; Fri, 31 Jul 2020 16:18:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=CCrf0JNZv+v7XnAC2zXNDLnfzhwewMny4SzCwBazlpk=; b=DMIGjUeCu7WS1yf3tO/ZSurFXxQBrmrk+d4SNtYg3Zx4gCqGr5TRspd1Co3OvHWOuD HgP0Q2MhZC5ng5TdGuBK1N01WZRuRbuL0sGEYmgyIAQ/nfOQmSKgbXe+WhGM7kP/jalx nJM2JxLFu2JgqXahVDnFg8bR+aSG0MSFz/IAE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=CCrf0JNZv+v7XnAC2zXNDLnfzhwewMny4SzCwBazlpk=; b=ZGO1ZkubIzW/Vl1uhvJH5ksrr2W+nKFDQBLPqPTvHGFdlgXkmsiroH+RgQ6KLXv7zS pjoWd81g4IFt4zmjklRrVi3ktJn41msr2HBkJFKUH7RchUYyrkxiG3L7wQfwQULAhrxI 0+W2uAeaaMMJWI+/jO8h0unvMQsX3dJ9AzYB4o1nOwEMpSYP+W/L1aQ0MlwVJyNpH1ys bYpg3MhuOMK7JrRLLmzY2GeQE4+ybxqkus/ZN/4ysw5aCYN2MQcQ6+m2a2qEnQU4VByV 6D4buq/LriFonOwtZ8a/eDrI0RUqWmy6LT094ap6MvNCK4tsUpJWSwYWdsJJ5Y+USdm/ nbfw== X-Gm-Message-State: AOAM532rv4EJ/UcSxgp6c62EcUJKcTfKZ6Et4PCLNiMa5cotHG2CKhDc 5zNeLp81cCp4VNXjWu5nHYqkkw== X-Google-Smtp-Source: ABdhPJzxG26pp/QHLf5eE3Hfqcu8R6vyN4v2osnuJzxCtSaiYaQfi+Blj9rxPYtcQ07RmWuKHr521Q== X-Received: by 2002:aa7:947b:: with SMTP id t27mr5503555pfq.117.1596237494645; Fri, 31 Jul 2020 16:18:14 -0700 (PDT) Received: from www.outflux.net (smtp.outflux.net. [198.145.64.163]) by smtp.gmail.com with ESMTPSA id i1sm11609642pfo.212.2020.07.31.16.18.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 31 Jul 2020 16:18:11 -0700 (PDT) From: Kees Cook To: Thomas Gleixner , Will Deacon Cc: Kees Cook , Catalin Marinas , Mark Rutland , Ard Biesheuvel , Peter Collingbourne , James Morse , Borislav Petkov , Ingo Molnar , Russell King , Masahiro Yamada , Arvind Sankar , Nick Desaulniers , Nathan Chancellor , Arnd Bergmann , x86@kernel.org, clang-built-linux@googlegroups.com, linux-arch@vger.kernel.org, linux-efi@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Subject: [PATCH v5 27/36] arm/boot: Warn on orphan section placement Date: Fri, 31 Jul 2020 16:08:11 -0700 Message-Id: <20200731230820.1742553-28-keescook@chromium.org> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20200731230820.1742553-1-keescook@chromium.org> References: <20200731230820.1742553-1-keescook@chromium.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: linux-efi-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-efi@vger.kernel.org We don't want to depend on the linker's orphan section placement heuristics as these can vary between linkers, and may change between versions. All sections need to be explicitly handled in the linker script. With all sections now handled, enable orphan section warning. Signed-off-by: Kees Cook --- arch/arm/boot/compressed/Makefile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/arm/boot/compressed/Makefile b/arch/arm/boot/compressed/Makefile index 00602a6fba04..b8a97d81662d 100644 --- a/arch/arm/boot/compressed/Makefile +++ b/arch/arm/boot/compressed/Makefile @@ -128,6 +128,8 @@ endif LDFLAGS_vmlinux += --no-undefined # Delete all temporary local symbols LDFLAGS_vmlinux += -X +# Report orphan sections +LDFLAGS_vmlinux += --orphan-handling=warn # Next argument is a linker script LDFLAGS_vmlinux += -T -- 2.25.1