From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751914AbcGMWB5 (ORCPT ); Wed, 13 Jul 2016 18:01:57 -0400 Received: from mail-vk0-f49.google.com ([209.85.213.49]:35366 "EHLO mail-vk0-f49.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751550AbcGMWBt (ORCPT ); Wed, 13 Jul 2016 18:01:49 -0400 MIME-Version: 1.0 In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> From: Andy Lutomirski Date: Wed, 13 Jul 2016 15:01:28 -0700 Message-ID: Subject: Re: [PATCH v2 01/11] mm: Implement stack frame object validation To: Kees Cook Cc: "linux-kernel@vger.kernel.org" , Rik van Riel , Casey Schaufler , PaX Team , Brad Spengler , Russell King , Catalin Marinas , Will Deacon , Ard Biesheuvel , Benjamin Herrenschmidt , Michael Ellerman , Tony Luck , Fenghua Yu , "David S. Miller" , X86 ML , Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Andy Lutomirski , Borislav Petkov , Mathias Krause , Jan Kara , Vitaly Wool , Andrea Arcangeli , Dmitry Vyukov , Laura Abbott , "linux-arm-kernel@lists.infradead.org" , "linux-ia64@vger.kernel.org" , linuxppc-dev@lists.ozlabs.org, sparclinux@vger.kernel.org, linux-arch , "linux-mm@kvack.org" , "kernel-hardening@lists.openwall.com" , Josh Poimboeuf Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Lutomirski Subject: Re: [PATCH v2 01/11] mm: Implement stack frame object validation Date: Wed, 13 Jul 2016 15:01:28 -0700 Message-ID: References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> Sender: owner-linux-mm@kvack.org To: Kees Cook Cc: "linux-kernel@vger.kernel.org" , Rik van Riel , Casey Schaufler , PaX Team , Brad Spengler , Russell King , Catalin Marinas , Will Deacon , Ard Biesheuvel , Benjamin Herrenschmidt , Michael Ellerman , Tony Luck , Fenghua Yu , "David S. Miller" , X86 ML , Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Andy Lutomirski , Borislav Petkov , Mathias Krause List-Id: linux-arch.vger.kernel.org On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-vk0-f53.google.com ([209.85.213.53]:36554 "EHLO mail-vk0-f53.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751884AbcGMWBy (ORCPT ); Wed, 13 Jul 2016 18:01:54 -0400 Received: by mail-vk0-f53.google.com with SMTP id j126so30836554vkg.3 for ; Wed, 13 Jul 2016 15:01:53 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> From: Andy Lutomirski Date: Wed, 13 Jul 2016 15:01:28 -0700 Message-ID: Subject: Re: [PATCH v2 01/11] mm: Implement stack frame object validation Content-Type: text/plain; charset=UTF-8 Sender: linux-arch-owner@vger.kernel.org List-ID: To: Kees Cook Cc: "linux-kernel@vger.kernel.org" , Rik van Riel , Casey Schaufler , PaX Team , Brad Spengler , Russell King , Catalin Marinas , Will Deacon , Ard Biesheuvel , Benjamin Herrenschmidt , Michael Ellerman , Tony Luck , Fenghua Yu , "David S. Miller" , X86 ML , Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Andy Lutomirski , Borislav Petkov , Mathias Krause , Jan Kara , Vitaly Wool , Andrea Arcangeli , Dmitry Vyukov , Laura Abbott , "linux-arm-kernel@lists.infradead.org" , "linux-ia64@vger.kernel.org" , linuxppc-dev@lists.ozlabs.org, sparclinux@vger.kernel.org, linux-arch , "linux-mm@kvack.org" , "kernel-hardening@lists.openwall.com" , Josh Poimboeuf Message-ID: <20160713220128.Cpq4qSrDvFaU3nKe3TIJb8LR2Sf2SIQ2oux4GiZZ6qs@z> On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Lutomirski Date: Wed, 13 Jul 2016 22:01:28 +0000 Subject: Re: [PATCH v2 01/11] mm: Implement stack frame object validation Message-Id: List-Id: References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Kees Cook Cc: "linux-kernel@vger.kernel.org" , Rik van Riel , Casey Schaufler , PaX Team , Brad Spengler , Russell King , Catalin Marinas , Will Deacon , Ard Biesheuvel , Benjamin Herrenschmidt , Michael Ellerman , Tony Luck , Fenghua Yu , "David S. Miller" , X86 ML , Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Andy Lutomirski , Borislav Petkov , Mathias Krause , Jan Kara , Vitaly Wool , Andrea Arcangeli , Dmitry Vyukov , Laura Abbott , "linux-arm-kernel@lists.infradead.org" , "linux-ia64@vger.kernel.org" , linuxppc-dev@lists.ozlabs.org, sparclinux@vger.kernel.org, linux-arch , "linux-mm@kvack.org" , "kernel-hardening@lists.openwall.com" , Josh Poimboeuf On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-vk0-f72.google.com (mail-vk0-f72.google.com [209.85.213.72]) by kanga.kvack.org (Postfix) with ESMTP id 378DE6B025F for ; Wed, 13 Jul 2016 18:01:49 -0400 (EDT) Received: by mail-vk0-f72.google.com with SMTP id r135so125321091vkf.0 for ; Wed, 13 Jul 2016 15:01:49 -0700 (PDT) Received: from mail-vk0-x232.google.com (mail-vk0-x232.google.com. [2607:f8b0:400c:c05::232]) by mx.google.com with ESMTPS id l189si921906vkh.174.2016.07.13.15.01.48 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 13 Jul 2016 15:01:48 -0700 (PDT) Received: by mail-vk0-x232.google.com with SMTP id x130so85238387vkc.0 for ; Wed, 13 Jul 2016 15:01:48 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> From: Andy Lutomirski Date: Wed, 13 Jul 2016 15:01:28 -0700 Message-ID: Subject: Re: [PATCH v2 01/11] mm: Implement stack frame object validation Content-Type: text/plain; charset=UTF-8 Sender: owner-linux-mm@kvack.org List-ID: To: Kees Cook Cc: "linux-kernel@vger.kernel.org" , Rik van Riel , Casey Schaufler , PaX Team , Brad Spengler , Russell King , Catalin Marinas , Will Deacon , Ard Biesheuvel , Benjamin Herrenschmidt , Michael Ellerman , Tony Luck , Fenghua Yu , "David S. Miller" , X86 ML , Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Andy Lutomirski , Borislav Petkov , Mathias Krause , Jan Kara , Vitaly Wool , Andrea Arcangeli , Dmitry Vyukov , Laura Abbott , "linux-arm-kernel@lists.infradead.org" , "linux-ia64@vger.kernel.org" , linuxppc-dev@lists.ozlabs.org, sparclinux@vger.kernel.org, linux-arch , "linux-mm@kvack.org" , "kernel-hardening@lists.openwall.com" , Josh Poimboeuf On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org From mboxrd@z Thu Jan 1 00:00:00 1970 From: luto@amacapital.net (Andy Lutomirski) Date: Wed, 13 Jul 2016 15:01:28 -0700 Subject: [PATCH v2 01/11] mm: Implement stack frame object validation In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> Message-ID: To: linux-arm-kernel@lists.infradead.org List-Id: linux-arm-kernel.lists.infradead.org On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy From mboxrd@z Thu Jan 1 00:00:00 1970 Reply-To: kernel-hardening@lists.openwall.com MIME-Version: 1.0 In-Reply-To: <1468446964-22213-2-git-send-email-keescook@chromium.org> References: <1468446964-22213-1-git-send-email-keescook@chromium.org> <1468446964-22213-2-git-send-email-keescook@chromium.org> From: Andy Lutomirski Date: Wed, 13 Jul 2016 15:01:28 -0700 Message-ID: Content-Type: text/plain; charset=UTF-8 Subject: [kernel-hardening] Re: [PATCH v2 01/11] mm: Implement stack frame object validation To: Kees Cook Cc: "linux-kernel@vger.kernel.org" , Rik van Riel , Casey Schaufler , PaX Team , Brad Spengler , Russell King , Catalin Marinas , Will Deacon , Ard Biesheuvel , Benjamin Herrenschmidt , Michael Ellerman , Tony Luck , Fenghua Yu , "David S. Miller" , X86 ML , Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Andy Lutomirski , Borislav Petkov , Mathias Krause , Jan Kara , Vitaly Wool , Andrea Arcangeli , Dmitry Vyukov , Laura Abbott , "linux-arm-kernel@lists.infradead.org" , "linux-ia64@vger.kernel.org" , linuxppc-dev@lists.ozlabs.org, sparclinux@vger.kernel.org, linux-arch , "linux-mm@kvack.org" , "kernel-hardening@lists.openwall.com" , Josh Poimboeuf List-ID: On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's livepatch work, are two examples of unwinders that matter for correctness instead of just debugging. ISTM this should just use Josh's code directly once it's been written. --Andy