From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-14.2 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_ADSP_CUSTOM_MED,DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,SIGNED_OFF_BY,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id ABC37C43464 for ; Fri, 18 Sep 2020 12:58:11 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id E6C3A207D3 for ; Fri, 18 Sep 2020 12:58:10 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="g7V1iz7h"; dkim=fail reason="signature verification failed" (2048-bit key) header.d=google.com header.i=@google.com header.b="OPEfNMvD" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org E6C3A207D3 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References:Message-ID: Subject:To:From:Date:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=j9Xwh7pwOG30qKs1RO7SliL5eafAJiZzeQtp8YTVaG8=; b=g7V1iz7h6xKWNIowmr8agw6ds zq2hG6sLtOpEITb8yNyJhcP1PhvYvoIaqYTH0o0jSD3G+hjwU7Bx0tJ2eHGalNRoHt8mt2t43+VhM ONtPja57iWUlow6Kk65+MJIOFruVqTxL8YJcMWoBXuifS2KVMc36fGETcJJ1wgjZ00APm7oyBCzEM d+3zU4RKMeos4YBq0BHJeld7VltBpENdnVo8lH3JrRB7udchNVHBISw1s6K4wgxWd7J9zUOHV4Djn P3Eo2NVS3P7ks3cIkpdwqTOhRqwBAFzLMWvpmQY/RBcUxRvzxs/vi71LnbmKZoY/hl5jzseSZ+uJ4 4wtx/2tzg==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1kJFvs-0002XL-Im; Fri, 18 Sep 2020 12:56:08 +0000 Received: from mail-wm1-x344.google.com ([2a00:1450:4864:20::344]) by merlin.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1kJFsH-0000mC-Aw for linux-arm-kernel@lists.infradead.org; Fri, 18 Sep 2020 12:52:26 +0000 Received: by mail-wm1-x344.google.com with SMTP id x23so5213972wmi.3 for ; Fri, 18 Sep 2020 05:52:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=9QeHCUfQyRWNLF4v5BVGx0mOMMB1DfrWlk1Da5oWEr0=; b=OPEfNMvDbr1GA16O+bD1EVvXU3RwiktLp1v4SspTfzVHQ3b6wc3DsOnL2yFV/7OJUX vJ86IOK7F7BbktHLeLTU4gwiJlcEho5MTNOtW2ME95PmxEoVh3EivAR0i7EzWek/DQ65 0Gcho1HTrLf4Rus/rXNQXoYuXPIyirZTjVrXQWGo57ObWUwFDkqmjdswWagbQK17pKvg qOtIEOxBuS0Kl59UHyNYRZBb1BkFJxXOf8jOsNo34C1fv1A9zYG7wP0awOp76oxY/VBl hm9z5eWcdjEUOFpxnP8+Uhkt7kqLMpfyk1Mqu2n2rHZTO2BiEEQ7Ade2j+xiZjgOtsLW gsSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=9QeHCUfQyRWNLF4v5BVGx0mOMMB1DfrWlk1Da5oWEr0=; b=TyuYdFCNjWoSsgNpPDdtAlkHSeNOBRblN7Scfc5TJ6NtnykcB15iF/tMoQLzHnWvcz yNA2mnRYp1uwpyeViqhcmodkgO3yAbAtu16SUg3NPU3wwbGr0vIOgXbeuqMhAAXyZZx5 k2MHSWNZrJWUPfOmyVGL/HWcKwymTjx+st1tXEBwpuh9WKKmdEA/kAdAHoqHptC2XRdN QBMzRXoBWYXHtdOUhyizTuD4vMYTPU7x2XbaySdkK+dGfrB/MIugwBT52pa1ipdndAKx eE9IOz+BOKM6nMIWF7aIt1uVAmwqTLnaD4M4wote/+yp/Wh3fuTzC7eWg/ycDqsbSZrP zcoQ== X-Gm-Message-State: AOAM532Swb1jb9a8TtS7YsvJfaLH4Hm7A1t4JSF48uvv0/jPX7bQkLXO ICEhNjp5uOOT5YF5o+zjm93Ncg== X-Google-Smtp-Source: ABdhPJzZiAEODydg/nQYzxZIt0k+pmAXCO33IML30l+9SgWT24seOlXi9uwnfVeunAVfJvZCSWDf5Q== X-Received: by 2002:a7b:ce96:: with SMTP id q22mr14478150wmj.132.1600433543383; Fri, 18 Sep 2020 05:52:23 -0700 (PDT) Received: from elver.google.com ([100.105.32.75]) by smtp.gmail.com with ESMTPSA id i16sm5028940wrq.73.2020.09.18.05.52.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 18 Sep 2020 05:52:22 -0700 (PDT) Date: Fri, 18 Sep 2020 14:52:16 +0200 From: Marco Elver To: Andrey Konovalov Subject: Re: [PATCH v2 33/37] kasan, arm64: implement HW_TAGS runtime Message-ID: <20200918125216.GD2384246@elver.google.com> References: <74133d1a57c47cb8fec791dd5d1e6417b0579fc3.1600204505.git.andreyknvl@google.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <74133d1a57c47cb8fec791dd5d1e6417b0579fc3.1600204505.git.andreyknvl@google.com> User-Agent: Mutt/1.14.4 (2020-06-18) X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20200918_085225_479542_EB0F7984 X-CRM114-Status: GOOD ( 32.12 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: linux-arm-kernel@lists.infradead.org, Branislav Rankov , Elena Petrova , Catalin Marinas , Kevin Brodsky , Will Deacon , linux-kernel@vger.kernel.org, kasan-dev@googlegroups.com, linux-mm@kvack.org, Alexander Potapenko , Evgenii Stepanov , Andrey Ryabinin , Andrew Morton , Vincenzo Frascino , Dmitry Vyukov Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org [ Sorry for the additional email on this patch; trying to consolidate comments now. ] On Tue, Sep 15, 2020 at 11:16PM +0200, Andrey Konovalov wrote: > Provide implementation of KASAN functions required for the hardware > tag-based mode. Those include core functions for memory and pointer > tagging (tags_hw.c) and bug reporting (report_tags_hw.c). Also adapt > common KASAN code to support the new mode. > > Signed-off-by: Andrey Konovalov > Signed-off-by: Vincenzo Frascino > --- > Change-Id: I8a8689ba098174a4d0ef3f1d008178387c80ee1c > --- > arch/arm64/include/asm/memory.h | 4 +- > arch/arm64/kernel/setup.c | 1 - > include/linux/kasan.h | 6 +-- > include/linux/mm.h | 2 +- > include/linux/page-flags-layout.h | 2 +- > mm/kasan/Makefile | 5 ++ > mm/kasan/common.c | 14 +++--- > mm/kasan/kasan.h | 17 +++++-- > mm/kasan/report_tags_hw.c | 47 +++++++++++++++++++ > mm/kasan/report_tags_sw.c | 2 +- > mm/kasan/shadow.c | 2 +- > mm/kasan/tags_hw.c | 78 +++++++++++++++++++++++++++++++ > mm/kasan/tags_sw.c | 2 +- > 13 files changed, 162 insertions(+), 20 deletions(-) > create mode 100644 mm/kasan/report_tags_hw.c > create mode 100644 mm/kasan/tags_hw.c [...] > diff --git a/mm/kasan/common.c b/mm/kasan/common.c > index 41c7f1105eaa..412a23d1546b 100644 > --- a/mm/kasan/common.c > +++ b/mm/kasan/common.c > @@ -118,7 +118,7 @@ void kasan_free_pages(struct page *page, unsigned int order) > */ > static inline unsigned int optimal_redzone(unsigned int object_size) > { > - if (IS_ENABLED(CONFIG_KASAN_SW_TAGS)) > + if (!IS_ENABLED(CONFIG_KASAN_GENERIC)) > return 0; > > return > @@ -183,14 +183,14 @@ size_t kasan_metadata_size(struct kmem_cache *cache) > struct kasan_alloc_meta *get_alloc_info(struct kmem_cache *cache, > const void *object) > { > - return (void *)object + cache->kasan_info.alloc_meta_offset; > + return (void *)reset_tag(object) + cache->kasan_info.alloc_meta_offset; > } > > struct kasan_free_meta *get_free_info(struct kmem_cache *cache, > const void *object) > { > BUILD_BUG_ON(sizeof(struct kasan_free_meta) > 32); > - return (void *)object + cache->kasan_info.free_meta_offset; > + return (void *)reset_tag(object) + cache->kasan_info.free_meta_offset; > } > > void kasan_poison_slab(struct page *page) > @@ -272,7 +272,8 @@ void * __must_check kasan_init_slab_obj(struct kmem_cache *cache, > alloc_info = get_alloc_info(cache, object); > __memset(alloc_info, 0, sizeof(*alloc_info)); Suggested edit below (assuming the line-break wasn't intentional; this should still be within checkpatch.pl's 100 col limit): ------ - if (IS_ENABLED(CONFIG_KASAN_SW_TAGS) || - IS_ENABLED(CONFIG_KASAN_HW_TAGS)) + if (IS_ENABLED(CONFIG_KASAN_SW_TAGS) || IS_ENABLED(CONFIG_KASAN_HW_TAGS)) object = set_tag(object, assign_tag(cache, object, true, false)); @@ -343,8 +342,7 @@ static void *__kasan_kmalloc(struct kmem_cache *cache, const void *object, redzone_end = round_up((unsigned long)object + cache->object_size, KASAN_GRANULE_SIZE); - if (IS_ENABLED(CONFIG_KASAN_SW_TAGS) || - IS_ENABLED(CONFIG_KASAN_HW_TAGS)) + if (IS_ENABLED(CONFIG_KASAN_SW_TAGS) || IS_ENABLED(CONFIG_KASAN_HW_TAGS)) tag = assign_tag(cache, object, false, keep_tag); ------ > - if (IS_ENABLED(CONFIG_KASAN_SW_TAGS)) > + if (IS_ENABLED(CONFIG_KASAN_SW_TAGS) || > + IS_ENABLED(CONFIG_KASAN_HW_TAGS)) > object = set_tag(object, > assign_tag(cache, object, true, false)); > > @@ -342,10 +343,11 @@ static void *__kasan_kmalloc(struct kmem_cache *cache, const void *object, > redzone_end = round_up((unsigned long)object + cache->object_size, > KASAN_GRANULE_SIZE); > > - if (IS_ENABLED(CONFIG_KASAN_SW_TAGS)) > + if (IS_ENABLED(CONFIG_KASAN_SW_TAGS) || > + IS_ENABLED(CONFIG_KASAN_HW_TAGS)) > tag = assign_tag(cache, object, false, keep_tag); > > - /* Tag is ignored in set_tag without CONFIG_KASAN_SW_TAGS */ > + /* Tag is ignored in set_tag without CONFIG_KASAN_SW/HW_TAGS */ > kasan_unpoison_memory(set_tag(object, tag), size); > kasan_poison_memory((void *)redzone_start, redzone_end - redzone_start, > KASAN_KMALLOC_REDZONE); [...] > diff --git a/mm/kasan/report_tags_hw.c b/mm/kasan/report_tags_hw.c > new file mode 100644 > index 000000000000..c2f73c46279a > --- /dev/null > +++ b/mm/kasan/report_tags_hw.c > @@ -0,0 +1,47 @@ > +// SPDX-License-Identifier: GPL-2.0 > +/* > + * This file contains hardware tag-based KASAN specific error reporting code. > + * > + * Copyright (c) 2020 Google, Inc. > + * Author: Andrey Konovalov > + * > + * This program is free software; you can redistribute it and/or modify > + * it under the terms of the GNU General Public License version 2 as > + * published by the Free Software Foundation. > + * I do not think we put the "This program is ..." preamble in new files anymore. It should be covered by SPDX tag above. > + */ > + > +#include > +#include > +#include > +#include > +#include > +#include [...] > diff --git a/mm/kasan/shadow.c b/mm/kasan/shadow.c > index 4888084ecdfc..ca69726adf8f 100644 > --- a/mm/kasan/shadow.c > +++ b/mm/kasan/shadow.c > @@ -111,7 +111,7 @@ void kasan_unpoison_memory(const void *address, size_t size) > > if (IS_ENABLED(CONFIG_KASAN_SW_TAGS)) > *shadow = tag; > - else > + else /* CONFIG_KASAN_GENERIC */ > *shadow = size & KASAN_GRANULE_MASK; > } > } > diff --git a/mm/kasan/tags_hw.c b/mm/kasan/tags_hw.c > new file mode 100644 > index 000000000000..c93d43379e39 > --- /dev/null > +++ b/mm/kasan/tags_hw.c > @@ -0,0 +1,78 @@ > +// SPDX-License-Identifier: GPL-2.0 > +/* > + * This file contains core hardware tag-based KASAN code. > + * > + * Copyright (c) 2020 Google, Inc. > + * Author: Andrey Konovalov > + * > + * This program is free software; you can redistribute it and/or modify > + * it under the terms of the GNU General Public License version 2 as > + * published by the Free Software Foundation. > + * I do not think we put the "This program is ..." preamble in new files anymore. It should be covered by SPDX tag above. > + */ > + > +#include > +#include > +#include > +#include > +#include > +#include > + > +#include "kasan.h" > + > +void kasan_init_tags(void) > +{ > + init_tags(KASAN_TAG_MAX); > +} > + > +void *kasan_reset_tag(const void *addr) > +{ > + return reset_tag(addr); > +} > + To help readability, would this edit be ok? ------ void kasan_poison_memory(const void *address, size_t size, u8 value) { - set_mem_tag_range(reset_tag(address), - round_up(size, KASAN_GRANULE_SIZE), value); + set_mem_tag_range(reset_tag(address), round_up(size, KASAN_GRANULE_SIZE), value); } void kasan_unpoison_memory(const void *address, size_t size) { - set_mem_tag_range(reset_tag(address), - round_up(size, KASAN_GRANULE_SIZE), get_tag(address)); + set_mem_tag_range(reset_tag(address), round_up(size, KASAN_GRANULE_SIZE), get_tag(address)); } ------ > +void kasan_poison_memory(const void *address, size_t size, u8 value) > +{ > + set_mem_tag_range(reset_tag(address), > + round_up(size, KASAN_GRANULE_SIZE), value); > +} > + > +void kasan_unpoison_memory(const void *address, size_t size) > +{ > + set_mem_tag_range(reset_tag(address), > + round_up(size, KASAN_GRANULE_SIZE), get_tag(address)); > +} > + > +u8 random_tag(void) > +{ > + return get_random_tag(); > +} > + > +bool check_invalid_free(void *addr) > +{ > + u8 ptr_tag = get_tag(addr); > + u8 mem_tag = get_mem_tag(addr); > + Why not just: ------ - if (shadow_byte == KASAN_TAG_INVALID) - return true; - if (tag != KASAN_TAG_KERNEL && tag != shadow_byte) - return true; - return false; + return shadow_byte == KASAN_TAG_INVALID || + (tag != KASAN_TAG_KERNEL && tag != shadow_byte); } ------ > + if (mem_tag == KASAN_TAG_INVALID) > + return true; > + if (ptr_tag != KASAN_TAG_KERNEL && ptr_tag != mem_tag) > + return true; > + return false; > +} > + Thanks, -- Marco _______________________________________________ linux-arm-kernel mailing list linux-arm-kernel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/linux-arm-kernel