From: Randy Dunlap <rdunlap@infradead.org> To: Andrew Morton <akpm@linux-foundation.org>, Kees Cook <keescook@chromium.org> Cc: linux-kernel@vger.kernel.org, Josh Poimboeuf <jpoimboe@redhat.com>, Rasmus Villemoes <linux@rasmusvillemoes.dk>, "Gustavo A. R. Silva" <gustavo@embeddedor.com>, "Tobin C. Harding" <me@tobin.cc>, Steven Rostedt <rostedt@goodmis.org>, Jonathan Corbet <corbet@lwn.net>, Chris Mason <clm@fb.com>, Josef Bacik <jbacik@fb.com>, David Sterba <dsterba@suse.com>, "David S. Miller" <davem@davemloft.net>, Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>, Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>, Ingo Molnar <mingo@kernel.org>, Peter Zijlstra <peterz@infradead.org>, Thomas Gleixner <tglx@linutronix.de>, Masahiro Yamada <yamada.masahiro@socionext.com>, Borislav Petkov <bp@suse.de>, Ian Abbott <abbotti@mev.co.uk>, Sergey Senozhatsky <sergey.senozhatsky.work@gmail.com>, Petr Mladek <pmladek@suse.com>, Andy Shevchenko <andriy.shevchenko@linux.intel.com>, Pantelis Antoniou <pantelis.antoniou@konsulko.com>, Linux Btrfs <linux-btrfs@vger.kernel.org>, Network Development <netdev@vger.kernel.org>, Kernel Hardening <kernel-hardening@lists.openwall.com>, Linus Torvalds <torvalds@linux-foundation.org> Subject: Re: [PATCH v3] kernel.h: Skip single-eval logic on literals in min()/max() Date: Fri, 9 Mar 2018 19:11:54 -0800 [thread overview] Message-ID: <e8874944-f0b7-7a1f-26f3-446d7d7fcc38@infradead.org> (raw) In-Reply-To: <20180309160719.154a3158e2d8ee56e43a918f@linux-foundation.org> On 03/09/2018 04:07 PM, Andrew Morton wrote: > On Fri, 9 Mar 2018 12:05:36 -0800 Kees Cook <keescook@chromium.org> wrote: > >> When max() is used in stack array size calculations from literal values >> (e.g. "char foo[max(sizeof(struct1), sizeof(struct2))]", the compiler >> thinks this is a dynamic calculation due to the single-eval logic, which >> is not needed in the literal case. This change removes several accidental >> stack VLAs from an x86 allmodconfig build: >> >> $ diff -u before.txt after.txt | grep ^- >> -drivers/input/touchscreen/cyttsp4_core.c:871:2: warning: ISO C90 forbids variable length array ‘ids’ [-Wvla] >> -fs/btrfs/tree-checker.c:344:4: warning: ISO C90 forbids variable length array ‘namebuf’ [-Wvla] >> -lib/vsprintf.c:747:2: warning: ISO C90 forbids variable length array ‘sym’ [-Wvla] >> -net/ipv4/proc.c:403:2: warning: ISO C90 forbids variable length array ‘buff’ [-Wvla] >> -net/ipv6/proc.c:198:2: warning: ISO C90 forbids variable length array ‘buff’ [-Wvla] >> -net/ipv6/proc.c:218:2: warning: ISO C90 forbids variable length array ‘buff64’ [-Wvla] >> >> Based on an earlier patch from Josh Poimboeuf. > > v1, v2 and v3 of this patch all fail with gcc-4.4.4: > > ./include/linux/jiffies.h: In function 'jiffies_delta_to_clock_t': > ./include/linux/jiffies.h:444: error: first argument to '__builtin_choose_expr' not a constant I'm seeing that problem with > gcc --version gcc (SUSE Linux) 4.8.5 in mmotm. > That's with > > #define __max(t1, t2, x, y) \ > __builtin_choose_expr(__builtin_constant_p(x) && \ > __builtin_constant_p(y) && \ > __builtin_types_compatible_p(t1, t2), \ > (t1)(x) > (t2)(y) ? (t1)(x) : (t2)(y), \ > __single_eval_max(t1, t2, \ > __UNIQUE_ID(max1_), \ > __UNIQUE_ID(max2_), \ > x, y)) > /** > * max - return maximum of two values of the same or compatible types > * @x: first value > * @y: second value > */ > #define max(x, y) __max(typeof(x), typeof(y), x, y) > > > A brief poke failed to reveal a workaround - gcc-4.4.4 doesn't appear > to know that __builtin_constant_p(x) is a constant. Or something. > > Sigh. Wasn't there some talk about modernizing our toolchain > requirements? -- ~Randy
WARNING: multiple messages have this Message-ID (diff)
From: Randy Dunlap <rdunlap@infradead.org> To: Andrew Morton <akpm@linux-foundation.org>, Kees Cook <keescook@chromium.org> Cc: linux-kernel@vger.kernel.org, Josh Poimboeuf <jpoimboe@redhat.com>, Rasmus Villemoes <linux@rasmusvillemoes.dk>, "Gustavo A. R. Silva" <gustavo@embeddedor.com>, "Tobin C. Harding" <me@tobin.cc>, Steven Rostedt <rostedt@goodmis.org>, Jonathan Corbet <corbet@lwn.net>, Chris Mason <clm@fb.com>, Josef Bacik <jbacik@fb.com>, David Sterba <dsterba@suse.com>, "David S. Miller" <davem@davemloft.net>, Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>, Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>, Ingo Molnar <mingo@kernel.org>, Peter Zijlstra <peterz@infradead.org>, Thomas Gleixner <tglx@linutronix.de>, Masahiro Yamada <yamada.masahiro@socionext.com>, Borislav Petkov <bp@suse.de>, Ian Abbott <abbotti@mev.co.uk>, Sergey Senozhatsky <sergey.senozhatsky.work@gmail.com>, Petr Mlade Subject: Re: [PATCH v3] kernel.h: Skip single-eval logic on literals in min()/max() Date: Fri, 9 Mar 2018 19:11:54 -0800 [thread overview] Message-ID: <e8874944-f0b7-7a1f-26f3-446d7d7fcc38@infradead.org> (raw) In-Reply-To: <20180309160719.154a3158e2d8ee56e43a918f@linux-foundation.org> On 03/09/2018 04:07 PM, Andrew Morton wrote: > On Fri, 9 Mar 2018 12:05:36 -0800 Kees Cook <keescook@chromium.org> wrote: > >> When max() is used in stack array size calculations from literal values >> (e.g. "char foo[max(sizeof(struct1), sizeof(struct2))]", the compiler >> thinks this is a dynamic calculation due to the single-eval logic, which >> is not needed in the literal case. This change removes several accidental >> stack VLAs from an x86 allmodconfig build: >> >> $ diff -u before.txt after.txt | grep ^- >> -drivers/input/touchscreen/cyttsp4_core.c:871:2: warning: ISO C90 forbids variable length array ‘ids’ [-Wvla] >> -fs/btrfs/tree-checker.c:344:4: warning: ISO C90 forbids variable length array ‘namebuf’ [-Wvla] >> -lib/vsprintf.c:747:2: warning: ISO C90 forbids variable length array ‘sym’ [-Wvla] >> -net/ipv4/proc.c:403:2: warning: ISO C90 forbids variable length array ‘buff’ [-Wvla] >> -net/ipv6/proc.c:198:2: warning: ISO C90 forbids variable length array ‘buff’ [-Wvla] >> -net/ipv6/proc.c:218:2: warning: ISO C90 forbids variable length array ‘buff64’ [-Wvla] >> >> Based on an earlier patch from Josh Poimboeuf. > > v1, v2 and v3 of this patch all fail with gcc-4.4.4: > > ./include/linux/jiffies.h: In function 'jiffies_delta_to_clock_t': > ./include/linux/jiffies.h:444: error: first argument to '__builtin_choose_expr' not a constant I'm seeing that problem with > gcc --version gcc (SUSE Linux) 4.8.5 in mmotm. > That's with > > #define __max(t1, t2, x, y) \ > __builtin_choose_expr(__builtin_constant_p(x) && \ > __builtin_constant_p(y) && \ > __builtin_types_compatible_p(t1, t2), \ > (t1)(x) > (t2)(y) ? (t1)(x) : (t2)(y), \ > __single_eval_max(t1, t2, \ > __UNIQUE_ID(max1_), \ > __UNIQUE_ID(max2_), \ > x, y)) > /** > * max - return maximum of two values of the same or compatible types > * @x: first value > * @y: second value > */ > #define max(x, y) __max(typeof(x), typeof(y), x, y) > > > A brief poke failed to reveal a workaround - gcc-4.4.4 doesn't appear > to know that __builtin_constant_p(x) is a constant. Or something. > > Sigh. Wasn't there some talk about modernizing our toolchain > requirements? -- ~Randy
next prev parent reply other threads:[~2018-03-10 3:12 UTC|newest] Thread overview: 85+ messages / expand[flat|nested] mbox.gz Atom feed top 2018-03-09 20:05 [PATCH v3] kernel.h: Skip single-eval logic on literals in min()/max() Kees Cook 2018-03-09 20:05 ` Kees Cook 2018-03-09 21:10 ` Linus Torvalds 2018-03-09 21:10 ` Linus Torvalds 2018-03-09 21:47 ` Kees Cook 2018-03-09 21:47 ` Kees Cook 2018-03-11 22:46 ` Tobin C. Harding 2018-03-11 22:46 ` Tobin C. Harding 2018-03-11 22:46 ` Tobin C. Harding 2018-03-13 13:31 ` David Laight 2018-03-13 13:31 ` David Laight 2018-03-10 0:07 ` Andrew Morton 2018-03-10 0:07 ` Andrew Morton 2018-03-10 0:28 ` Linus Torvalds 2018-03-10 0:28 ` Linus Torvalds 2018-03-10 0:32 ` Andrew Morton 2018-03-10 0:32 ` Andrew Morton 2018-03-10 0:38 ` Linus Torvalds 2018-03-10 0:38 ` Linus Torvalds 2018-03-10 1:30 ` Kees Cook 2018-03-10 1:30 ` Kees Cook 2018-03-10 1:31 ` Kees Cook 2018-03-10 1:31 ` Kees Cook 2018-03-10 2:37 ` Linus Torvalds 2018-03-10 2:37 ` Linus Torvalds 2018-03-12 22:55 ` Andrew Morton 2018-03-12 22:55 ` Andrew Morton 2018-03-12 23:57 ` Linus Torvalds 2018-03-12 23:57 ` Linus Torvalds 2018-03-13 4:28 ` Kees Cook 2018-03-13 4:28 ` Kees Cook 2018-03-13 21:02 ` Andrew Morton 2018-03-13 21:02 ` Andrew Morton 2018-03-13 22:14 ` Kees Cook 2018-03-13 22:14 ` Kees Cook 2018-03-14 11:35 ` David Laight 2018-03-14 11:35 ` David Laight 2018-03-10 3:11 ` Randy Dunlap [this message] 2018-03-10 3:11 ` Randy Dunlap 2018-03-10 6:10 ` Miguel Ojeda 2018-03-10 6:10 ` Miguel Ojeda 2018-03-10 7:03 ` Miguel Ojeda 2018-03-10 7:03 ` Miguel Ojeda 2018-03-10 16:04 ` Linus Torvalds 2018-03-10 16:04 ` Linus Torvalds 2018-03-10 15:33 ` Kees Cook 2018-03-10 15:33 ` Kees Cook 2018-03-10 16:11 ` Linus Torvalds 2018-03-10 16:11 ` Linus Torvalds 2018-03-10 16:30 ` Linus Torvalds 2018-03-10 16:30 ` Linus Torvalds 2018-03-10 17:34 ` Miguel Ojeda 2018-03-10 17:34 ` Miguel Ojeda 2018-03-10 17:51 ` Linus Torvalds 2018-03-10 17:51 ` Linus Torvalds 2018-03-10 19:08 ` Miguel Ojeda 2018-03-10 19:08 ` Miguel Ojeda 2018-03-11 11:05 ` Ingo Molnar 2018-03-11 11:05 ` Ingo Molnar 2018-03-11 18:23 ` Linus Torvalds 2018-03-11 18:23 ` Linus Torvalds 2018-03-10 2:34 [PATCH 0/3] tracing: Rewrite the function filter code Steven Rostedt 2018-03-10 2:34 ` [PATCH 1/3] tracing: Combine enum and arrays into single macro in " Steven Rostedt 2018-03-12 10:31 ` Masami Hiramatsu 2018-03-10 2:34 ` [PATCH 2/3] tracing: Clean up and document pred_funcs_##type creation and use Steven Rostedt 2018-03-12 13:42 ` Masami Hiramatsu 2018-03-10 2:34 ` [PATCH 3/3] tracing: Rewrite filter logic to be simpler and faster Steven Rostedt 2018-03-10 3:10 ` Steven Rostedt 2018-03-10 3:10 ` Steven Rostedt 2018-03-10 3:15 ` Steven Rostedt 2018-03-10 3:15 ` Steven Rostedt 2018-03-10 3:22 ` Steven Rostedt 2018-03-10 3:22 ` Steven Rostedt 2018-03-10 3:18 ` Steven Rostedt 2018-03-12 12:42 ` Jiri Olsa 2018-03-12 18:38 ` Steven Rostedt 2018-03-12 15:10 ` Jiri Olsa 2018-03-12 18:40 ` Steven Rostedt 2018-03-12 18:54 ` Jiri Olsa 2018-03-12 19:10 ` Steven Rostedt 2018-03-12 23:52 ` Steven Rostedt 2018-03-13 10:14 ` Jiri Olsa 2018-03-13 14:12 ` Steven Rostedt 2018-03-13 14:27 ` Jiri Olsa 2018-03-11 19:54 ` [PATCH 0/3] tracing: Rewrite the function filter code Jiri Olsa
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=e8874944-f0b7-7a1f-26f3-446d7d7fcc38@infradead.org \ --to=rdunlap@infradead.org \ --cc=abbotti@mev.co.uk \ --cc=akpm@linux-foundation.org \ --cc=andriy.shevchenko@linux.intel.com \ --cc=bp@suse.de \ --cc=clm@fb.com \ --cc=corbet@lwn.net \ --cc=davem@davemloft.net \ --cc=dsterba@suse.com \ --cc=gustavo@embeddedor.com \ --cc=jbacik@fb.com \ --cc=jpoimboe@redhat.com \ --cc=keescook@chromium.org \ --cc=kernel-hardening@lists.openwall.com \ --cc=kuznet@ms2.inr.ac.ru \ --cc=linux-btrfs@vger.kernel.org \ --cc=linux-kernel@vger.kernel.org \ --cc=linux@rasmusvillemoes.dk \ --cc=me@tobin.cc \ --cc=mingo@kernel.org \ --cc=netdev@vger.kernel.org \ --cc=pantelis.antoniou@konsulko.com \ --cc=peterz@infradead.org \ --cc=pmladek@suse.com \ --cc=rostedt@goodmis.org \ --cc=sergey.senozhatsky.work@gmail.com \ --cc=tglx@linutronix.de \ --cc=torvalds@linux-foundation.org \ --cc=yamada.masahiro@socionext.com \ --cc=yoshfuji@linux-ipv6.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.