All of lore.kernel.org
 help / color / mirror / Atom feed
From: Yann Droneaud <ydroneaud@opteya.com>
To: Jason Cooper <jason@lakedaemon.net>,
	Kees Cook <keescook@chromium.org>,
	Michael Ellerman <mpe@ellerman.id.au>,
	"Roberts, William C" <william.c.roberts@intel.com>
Cc: Linux-MM <linux-mm@kvack.org>,
	LKML <linux-kernel@vger.kernel.org>,
	kernel-hardening <kernel-hardening@lists.openwall.com>,
	Russell King - ARM Linux <linux@arm.linux.org.uk>,
	Andrew Morton <akpm@linux-foundation.org>,
	"Theodore Ts'o" <tytso@mit.edu>, Arnd Bergmann <arnd@arndb.de>,
	gregkh@linuxfoundation.org,
	Catalin Marinas <catalin.marinas@arm.com>,
	Will Deacon <will.deacon@arm.com>,
	Ralf Baechle <ralf@linux-mips.org>,
	benh@kernel.crashing.org, paulus@samba.org,
	"David S. Miller" <davem@davemloft.net>,
	Thomas Gleixner <tglx@linutronix.de>,
	Ingo Molnar <mingo@redhat.com>, "H . Peter Anvin" <hpa@zytor.com>,
	x86@kernel.org, viro@zeniv.linux.org.uk,
	Nick Kralevich <nnk@google.com>,
	Jeffrey Vander Stoep <jeffv@google.com>,
	Daniel Cashman <dcashman@android.com>
Subject: Re: [PATCH v3 1/7] random: Simplify API for random address requests
Date: Thu, 04 Aug 2016 14:47:07 +0200	[thread overview]
Message-ID: <1470314827.2764.11.camel@opteya.com> (raw)
In-Reply-To: <20160803233913.32511-2-jason@lakedaemon.net>

Hi,

Le mercredi 03 août 2016 à 23:39 +0000, Jason Cooper a écrit :
> 
> diff --git a/drivers/char/random.c b/drivers/char/random.c
> index 0158d3bff7e5..61cb434e3bea 100644
> --- a/drivers/char/random.c
> +++ b/drivers/char/random.c
> @@ -1840,6 +1840,39 @@ randomize_range(unsigned long start, unsigned
> long end, unsigned long len)
>  	return PAGE_ALIGN(get_random_int() % range + start);
>  }
>  
> +/**
> + * randomize_page - Generate a random, page aligned address
> + * @start:	The smallest acceptable address the caller will
> take.
> + * @range:	The size of the area, starting at @start, within
> which the
> + *		random address must fall.
> + *
> + * If @start + @range would overflow, @range is capped.
> + *
> + * NOTE: Historical use of randomize_range, which this replaces,
> presumed that
> + * @start was already page aligned.  We now align it regardless.
> + *
> + * Return: A page aligned address within [start, start + range).  On
> error,
> + * @start is returned.
> + */
> +unsigned long
> +randomize_page(unsigned long start, unsigned long range)
> +{

To prevent an underflow if start is not page aligned (but will one
would ever use a non aligned start address *and* range ? ...)

        if (range < PAGE_SIZE)
                return start;


> +	if (!PAGE_ALIGNED(start)) {
> +		range -= PAGE_ALIGN(start) - start;
> +		start = PAGE_ALIGN(start);
> +	}
> +
> +	if (start > ULONG_MAX - range)
> +		range = ULONG_MAX - start;
> +
> +	range >>= PAGE_SHIFT;
> +
> +	if (range == 0)
> +		return start;
> +
> +	return start + (get_random_long() % range << PAGE_SHIFT);
> +}
> +
>  /* Interface for in-kernel drivers of true hardware RNGs.
>   * Those devices may produce endless random bits and will be
> throttled
>   * when our pool is full.
> 

Regards.

-- 
Yann Droneaud
OPTEYA

WARNING: multiple messages have this Message-ID (diff)
From: Yann Droneaud <ydroneaud@opteya.com>
To: Jason Cooper <jason@lakedaemon.net>,
	Kees Cook <keescook@chromium.org>,
	Michael Ellerman <mpe@ellerman.id.au>,
	"Roberts, William C" <william.c.roberts@intel.com>
Cc: Linux-MM <linux-mm@kvack.org>,
	LKML <linux-kernel@vger.kernel.org>,
	kernel-hardening <kernel-hardening@lists.openwall.com>,
	Russell King - ARM Linux <linux@arm.linux.org.uk>,
	Andrew Morton <akpm@linux-foundation.org>,
	Theodore Ts'o <tytso@mit.edu>, Arnd Bergmann <arnd@arndb.de>,
	gregkh@linuxfoundation.org,
	Catalin Marinas <catalin.marinas@arm.com>,
	Will Deacon <will.deacon@arm.com>,
	Ralf Baechle <ralf@linux-mips.org>,
	benh@kernel.crashing.org, paulus@samba.org,
	"David S. Miller" <davem@davemloft.net>,
	Thomas Gleixner <tglx@linutronix.de>,
	Ingo Molnar <mingo@redhat.com>, "H . Peter Anvin" <hpa@zytor.com>,
	x86@kernel.org, viro@zeniv.linux.org.uk,
	Nick Kralevich <nnk@google.com>,
	Jeffrey Vander Stoep <jeffv@google.com>,
	Daniel Cashman <dcashman@android.com>
Subject: Re: [PATCH v3 1/7] random: Simplify API for random address requests
Date: Thu, 04 Aug 2016 14:47:07 +0200	[thread overview]
Message-ID: <1470314827.2764.11.camel@opteya.com> (raw)
In-Reply-To: <20160803233913.32511-2-jason@lakedaemon.net>

Hi,

Le mercredi 03 aoA>>t 2016 A  23:39 +0000, Jason Cooper a A(C)critA :
>A 
> diff --git a/drivers/char/random.c b/drivers/char/random.c
> index 0158d3bff7e5..61cb434e3bea 100644
> --- a/drivers/char/random.c
> +++ b/drivers/char/random.c
> @@ -1840,6 +1840,39 @@ randomize_range(unsigned long start, unsigned
> long end, unsigned long len)
> A 	return PAGE_ALIGN(get_random_int() % range + start);
> A }
> A 
> +/**
> + * randomize_page - Generate a random, page aligned address
> + * @start:	The smallest acceptable address the caller will
> take.
> + * @range:	The size of the area, starting at @start, within
> which the
> + *		random address must fall.
> + *
> + * If @start + @range would overflow, @range is capped.
> + *
> + * NOTE: Historical use of randomize_range, which this replaces,
> presumed that
> + * @start was already page aligned.A A We now align it regardless.
> + *
> + * Return: A page aligned address within [start, start + range).A A On
> error,
> + * @start is returned.
> + */
> +unsigned long
> +randomize_page(unsigned long start, unsigned long range)
> +{

To prevent an underflow if start is not page aligned (but will one
would ever use a non aligned start address *and* range ? ...)

A A A A A A A A if (range < PAGE_SIZE)
A A A A A A A A A A A A A A A A return start;


> +	if (!PAGE_ALIGNED(start)) {
> +		range -= PAGE_ALIGN(start) - start;
> +		start = PAGE_ALIGN(start);
> +	}
> +
> +	if (start > ULONG_MAX - range)
> +		range = ULONG_MAX - start;
> +
> +	range >>= PAGE_SHIFT;
> +
> +	if (range == 0)
> +		return start;
> +
> +	return start + (get_random_long() % range << PAGE_SHIFT);
> +}
> +
> A /* Interface for in-kernel drivers of true hardware RNGs.
> A  * Those devices may produce endless random bits and will be
> throttled
> A  * when our pool is full.
>A 

Regards.

--A 
Yann Droneaud
OPTEYA

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>

WARNING: multiple messages have this Message-ID (diff)
From: Yann Droneaud <ydroneaud@opteya.com>
To: Jason Cooper <jason@lakedaemon.net>,
	Kees Cook <keescook@chromium.org>,
	Michael Ellerman <mpe@ellerman.id.au>,
	"Roberts, William C" <william.c.roberts@intel.com>
Cc: Linux-MM <linux-mm@kvack.org>,
	LKML <linux-kernel@vger.kernel.org>,
	kernel-hardening <kernel-hardening@lists.openwall.com>,
	Russell King - ARM Linux <linux@arm.linux.org.uk>,
	Andrew Morton <akpm@linux-foundation.org>,
	Theodore Ts'o <tytso@mit.edu>, Arnd Bergmann <arnd@arndb.de>,
	gregkh@linuxfoundation.org,
	Catalin Marinas <catalin.marinas@arm.com>,
	Will Deacon <will.deacon@arm.com>,
	Ralf Baechle <ralf@linux-mips.org>,
	benh@kernel.crashing.org, paulus@samba.org,
	"David S. Miller" <davem@davemloft.net>,
	Thomas Gleixner <tglx@linutronix.de>,
	Ingo Molnar <mingo@redhat.com>, "H . Peter Anvin" <hpa@zytor.com>,
	x86@kernel.org, viro@zeniv.linux.org.uk,
	Nick Kralevich <nnk@google.com>,
	Jeffrey Vander Stoep <jeffv@google.com>,
	Daniel Cashman <dcashman@android.com>
Subject: [kernel-hardening] Re: [PATCH v3 1/7] random: Simplify API for random address requests
Date: Thu, 04 Aug 2016 14:47:07 +0200	[thread overview]
Message-ID: <1470314827.2764.11.camel@opteya.com> (raw)
In-Reply-To: <20160803233913.32511-2-jason@lakedaemon.net>

Hi,

Le mercredi 03 août 2016 à 23:39 +0000, Jason Cooper a écrit :
> 
> diff --git a/drivers/char/random.c b/drivers/char/random.c
> index 0158d3bff7e5..61cb434e3bea 100644
> --- a/drivers/char/random.c
> +++ b/drivers/char/random.c
> @@ -1840,6 +1840,39 @@ randomize_range(unsigned long start, unsigned
> long end, unsigned long len)
>  	return PAGE_ALIGN(get_random_int() % range + start);
>  }
>  
> +/**
> + * randomize_page - Generate a random, page aligned address
> + * @start:	The smallest acceptable address the caller will
> take.
> + * @range:	The size of the area, starting at @start, within
> which the
> + *		random address must fall.
> + *
> + * If @start + @range would overflow, @range is capped.
> + *
> + * NOTE: Historical use of randomize_range, which this replaces,
> presumed that
> + * @start was already page aligned.  We now align it regardless.
> + *
> + * Return: A page aligned address within [start, start + range).  On
> error,
> + * @start is returned.
> + */
> +unsigned long
> +randomize_page(unsigned long start, unsigned long range)
> +{

To prevent an underflow if start is not page aligned (but will one
would ever use a non aligned start address *and* range ? ...)

        if (range < PAGE_SIZE)
                return start;


> +	if (!PAGE_ALIGNED(start)) {
> +		range -= PAGE_ALIGN(start) - start;
> +		start = PAGE_ALIGN(start);
> +	}
> +
> +	if (start > ULONG_MAX - range)
> +		range = ULONG_MAX - start;
> +
> +	range >>= PAGE_SHIFT;
> +
> +	if (range == 0)
> +		return start;
> +
> +	return start + (get_random_long() % range << PAGE_SHIFT);
> +}
> +
>  /* Interface for in-kernel drivers of true hardware RNGs.
>   * Those devices may produce endless random bits and will be
> throttled
>   * when our pool is full.
> 

Regards.

-- 
Yann Droneaud
OPTEYA

  reply	other threads:[~2016-08-04 12:47 UTC|newest]

Thread overview: 111+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-07-28 20:47 [PATCH 0/7] char/random: Simplify random address requests Jason Cooper
2016-07-28 20:47 ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47 ` Jason Cooper
2016-07-28 20:47 ` [PATCH 1/7] random: Simplify API for " Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-29  8:59   ` Yann Droneaud
2016-07-29  8:59     ` [kernel-hardening] " Yann Droneaud
2016-07-29  8:59     ` Yann Droneaud
2016-07-29 18:20     ` Jason Cooper
2016-07-29 18:20       ` [kernel-hardening] " Jason Cooper
2016-07-29 18:20       ` Jason Cooper
2016-07-28 20:47 ` [PATCH 2/7] x86: Use simpler " Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-28 20:47 ` [PATCH 3/7] ARM: " Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-28 20:47 ` [PATCH 4/7] arm64: " Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-29 13:48   ` Will Deacon
2016-07-29 13:48     ` [kernel-hardening] " Will Deacon
2016-07-29 13:48     ` Will Deacon
2016-07-28 20:47 ` [PATCH 5/7] tile: " Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-28 20:47 ` [PATCH 6/7] unicore32: " Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-28 20:47 ` [PATCH 7/7] random: Remove unused randomize_range() Jason Cooper
2016-07-28 20:47   ` [kernel-hardening] " Jason Cooper
2016-07-28 20:47   ` Jason Cooper
2016-07-30 15:42 ` [PATCH v2 0/7] char/random: Simplify random address requests Jason Cooper
2016-07-30 15:42   ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42   ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 1/7] random: Simplify API for " Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-07-31 16:46     ` Kees Cook
2016-07-31 16:46       ` [kernel-hardening] " Kees Cook
2016-07-31 16:46       ` Kees Cook
2016-07-31 20:56       ` Jason Cooper
2016-07-31 20:56         ` [kernel-hardening] " Jason Cooper
2016-07-31 20:56         ` Jason Cooper
2016-08-01 19:47         ` Kees Cook
2016-08-01 19:47           ` [kernel-hardening] " Kees Cook
2016-08-01 19:47           ` Kees Cook
2016-08-01 23:17           ` Jason Cooper
2016-08-01 23:17             ` [kernel-hardening] " Jason Cooper
2016-08-01 23:17             ` Jason Cooper
2016-08-02  3:35             ` [kernel-hardening] " Michael Ellerman
2016-08-02  3:35               ` Michael Ellerman
2016-08-02  3:35               ` Michael Ellerman
2016-08-03 18:42               ` Jason Cooper
2016-08-03 18:42                 ` Jason Cooper
2016-08-03 18:42                 ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 2/7] x86: Use simpler " Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 3/7] ARM: " Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 4/7] arm64: " Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 5/7] tile: " Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 6/7] unicore32: " Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-07-30 15:42   ` [PATCH v2 7/7] random: Remove unused randomize_range() Jason Cooper
2016-07-30 15:42     ` [kernel-hardening] " Jason Cooper
2016-07-30 15:42     ` Jason Cooper
2016-08-03 23:39 ` [PATCH v3 0/7] char/random: Simplify random address requests Jason Cooper
2016-08-03 23:39   ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39   ` Jason Cooper
2016-08-03 23:39   ` [PATCH v3 1/7] random: Simplify API for " Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-04 12:47     ` Yann Droneaud [this message]
2016-08-04 12:47       ` [kernel-hardening] " Yann Droneaud
2016-08-04 12:47       ` Yann Droneaud
2016-08-03 23:39   ` [PATCH v3 2/7] x86: Use simpler " Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-03 23:39   ` [PATCH v3 3/7] ARM: " Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-03 23:39   ` [PATCH v3 4/7] arm64: " Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-03 23:39   ` [PATCH v3 5/7] tile: " Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-03 23:39   ` [PATCH v3 6/7] unicore32: " Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-03 23:39   ` [PATCH v3 7/7] random: Remove unused randomize_range() Jason Cooper
2016-08-03 23:39     ` [kernel-hardening] " Jason Cooper
2016-08-03 23:39     ` Jason Cooper
2016-08-03 23:48     ` Andrew Morton
2016-08-03 23:48       ` [kernel-hardening] " Andrew Morton
2016-08-03 23:48       ` Andrew Morton
2016-08-04  0:19       ` Jason Cooper
2016-08-04  0:19         ` [kernel-hardening] " Jason Cooper
2016-08-04  0:19         ` Jason Cooper
2016-08-04  2:41   ` [PATCH v3 0/7] char/random: Simplify random address requests Kees Cook
2016-08-04  2:41     ` [kernel-hardening] " Kees Cook
2016-08-04  2:41     ` Kees Cook

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1470314827.2764.11.camel@opteya.com \
    --to=ydroneaud@opteya.com \
    --cc=akpm@linux-foundation.org \
    --cc=arnd@arndb.de \
    --cc=benh@kernel.crashing.org \
    --cc=catalin.marinas@arm.com \
    --cc=davem@davemloft.net \
    --cc=dcashman@android.com \
    --cc=gregkh@linuxfoundation.org \
    --cc=hpa@zytor.com \
    --cc=jason@lakedaemon.net \
    --cc=jeffv@google.com \
    --cc=keescook@chromium.org \
    --cc=kernel-hardening@lists.openwall.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=linux@arm.linux.org.uk \
    --cc=mingo@redhat.com \
    --cc=mpe@ellerman.id.au \
    --cc=nnk@google.com \
    --cc=paulus@samba.org \
    --cc=ralf@linux-mips.org \
    --cc=tglx@linutronix.de \
    --cc=tytso@mit.edu \
    --cc=viro@zeniv.linux.org.uk \
    --cc=will.deacon@arm.com \
    --cc=william.c.roberts@intel.com \
    --cc=x86@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.