From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-11.4 required=3.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_IN_DEF_DKIM_WL autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 462B1C43468 for ; Mon, 21 Sep 2020 13:38:48 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 8E01E20888 for ; Mon, 21 Sep 2020 13:38:47 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="HNVQxdIv" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 8E01E20888 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 0E463900068; Mon, 21 Sep 2020 09:38:47 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 06E93900059; Mon, 21 Sep 2020 09:38:47 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id E0359900068; Mon, 21 Sep 2020 09:38:46 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0244.hostedemail.com [216.40.44.244]) by kanga.kvack.org (Postfix) with ESMTP id C5172900059 for ; Mon, 21 Sep 2020 09:38:46 -0400 (EDT) Received: from smtpin19.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with ESMTP id 7BA14824999B for ; Mon, 21 Sep 2020 13:38:46 +0000 (UTC) X-FDA: 77287173852.19.grade63_29015ce27145 Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin19.hostedemail.com (Postfix) with ESMTP id 0C4AC1ACC22 for ; Mon, 21 Sep 2020 13:38:46 +0000 (UTC) X-HE-Tag: grade63_29015ce27145 X-Filterd-Recvd-Size: 9758 Received: from mail-qv1-f66.google.com (mail-qv1-f66.google.com [209.85.219.66]) by imf29.hostedemail.com (Postfix) with ESMTP for ; Mon, 21 Sep 2020 13:38:45 +0000 (UTC) Received: by mail-qv1-f66.google.com with SMTP id p15so7274616qvk.5 for ; Mon, 21 Sep 2020 06:38:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ERlr98dYkkda4zLxk53JkLPO7AhscnKPFqUfoBopbaA=; b=HNVQxdIvyjxV02C0SmKSgBOK3X7gmaAI+1wd7Y1v/D2826xQAIFx2yNTQVVIQCTkGk DJIiamwhdLzg1aiKo8B+4LNJMb4aahXCaj6Tnxrec6RRLNHYMCi6KSMa7W0RazgRWKWl bibpbbIsj5H/7ZgjXUXqJQNV1rg4WsPmAo8I4psbOh37Nu7Z1O7nCfyiuwWKMEOyrnCW 9nVjMyy+gJNxrh5Q+/2mcz0oSUjxm1+RI1npswmnkqm/5TuTKzoyRs5Z2BYZRqKYGzIv wWUtgg7NJyPApffKrC4m14CoV8blSCRSAoOgoGKYZXu7mDTBJ0i5DHI6ERGJjiFg2DZE AYxA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ERlr98dYkkda4zLxk53JkLPO7AhscnKPFqUfoBopbaA=; b=ukQ+T2uDYnOyP0uTmC5+42XExzpqBb1HBJuognO2l5Ff+WxDmbOwBDgDd99bNHlURB jx5J+F8xHDn/JXfroM4GEPpxv+9Zb0nlaJqXytQV4nomGL8frU00lkdfboklU0xKvbiX bvGp0mK/qBUs5VjUxlJzm9fZpALBoB/9agzy9uBhO3kos3v18SGCKN2ZaD92bL83m2Bi LiZABop5U7XIuOdzW5JKKpHN4+s612a54knZz8tOErLjSwsN1Yp2UXensECESwFoj1Yi MTorWwFh+vgCex8BaHdJspWyP6iAURTfelO+0cVOacOyA/CzOCMLICQ5MaYO2LFdDlL5 K1Dg== X-Gm-Message-State: AOAM530dxF4/o5Cdt6q71uxo8D37CXSG5BfHsbSFppTrs+WLi3WaTsFo T1WizEAVy/vVwTLhwjJmhKGLa/zA6Elo2YNGqHabYQ== X-Google-Smtp-Source: ABdhPJzu+vpcCJEiJAr7jQhKGwS1zn6cL7CDLvVaILUlHon5A+NGPQgau+h6tFlcRBb2p1DUcTCfbj90hS7dNHDxS9g= X-Received: by 2002:a0c:a4c5:: with SMTP id x63mr36319qvx.58.1600695524500; Mon, 21 Sep 2020 06:38:44 -0700 (PDT) MIME-Version: 1.0 References: <20200921132611.1700350-1-elver@google.com> In-Reply-To: <20200921132611.1700350-1-elver@google.com> From: Dmitry Vyukov Date: Mon, 21 Sep 2020 15:38:33 +0200 Message-ID: Subject: Re: [PATCH v3 00/10] KFENCE: A low-overhead sampling-based memory safety error detector To: Andrew Morton Cc: Alexander Potapenko , "H. Peter Anvin" , "Paul E. McKenney" , Andrey Konovalov , Andrey Ryabinin , Andy Lutomirski , Borislav Petkov , Catalin Marinas , Christoph Lameter , Dave Hansen , David Rientjes , Eric Dumazet , Greg Kroah-Hartman , Hillf Danton , Ingo Molnar , Jann Horn , Jonathan.Cameron@huawei.com, Jonathan Corbet , Joonsoo Kim , Kees Cook , Mark Rutland , Pekka Enberg , Peter Zijlstra , sjpark@amazon.com, Thomas Gleixner , Vlastimil Babka , Will Deacon , "the arch/x86 maintainers" , "open list:DOCUMENTATION" , LKML , kasan-dev , Linux ARM , Linux-MM , Marco Elver Content-Type: text/plain; charset="UTF-8" X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Mon, Sep 21, 2020 at 3:26 PM Marco Elver wrote: > > This adds the Kernel Electric-Fence (KFENCE) infrastructure. KFENCE is a > low-overhead sampling-based memory safety error detector of heap > use-after-free, invalid-free, and out-of-bounds access errors. This > series enables KFENCE for the x86 and arm64 architectures, and adds > KFENCE hooks to the SLAB and SLUB allocators. Hi Andrew, I wanted to ask what we can expect with respect to the timeline of merging this into mm/upstream? The series got few reviews/positive feedback. Thank you > KFENCE is designed to be enabled in production kernels, and has near > zero performance overhead. Compared to KASAN, KFENCE trades performance > for precision. The main motivation behind KFENCE's design, is that with > enough total uptime KFENCE will detect bugs in code paths not typically > exercised by non-production test workloads. One way to quickly achieve a > large enough total uptime is when the tool is deployed across a large > fleet of machines. > > KFENCE objects each reside on a dedicated page, at either the left or > right page boundaries. The pages to the left and right of the object > page are "guard pages", whose attributes are changed to a protected > state, and cause page faults on any attempted access to them. Such page > faults are then intercepted by KFENCE, which handles the fault > gracefully by reporting a memory access error. > > Guarded allocations are set up based on a sample interval (can be set > via kfence.sample_interval). After expiration of the sample interval, > the next allocation through the main allocator (SLAB or SLUB) returns a > guarded allocation from the KFENCE object pool. At this point, the timer > is reset, and the next allocation is set up after the expiration of the > interval. > > To enable/disable a KFENCE allocation through the main allocator's > fast-path without overhead, KFENCE relies on static branches via the > static keys infrastructure. The static branch is toggled to redirect the > allocation to KFENCE. > > The KFENCE memory pool is of fixed size, and if the pool is exhausted no > further KFENCE allocations occur. The default config is conservative > with only 255 objects, resulting in a pool size of 2 MiB (with 4 KiB > pages). > > We have verified by running synthetic benchmarks (sysbench I/O, > hackbench) that a kernel with KFENCE is performance-neutral compared to > a non-KFENCE baseline kernel. > > KFENCE is inspired by GWP-ASan [1], a userspace tool with similar > properties. The name "KFENCE" is a homage to the Electric Fence Malloc > Debugger [2]. > > For more details, see Documentation/dev-tools/kfence.rst added in the > series -- also viewable here: > > https://raw.githubusercontent.com/google/kasan/kfence/Documentation/dev-tools/kfence.rst > > [1] http://llvm.org/docs/GwpAsan.html > [2] https://linux.die.net/man/3/efence > > v3: > * Rewrite SLAB/SLUB patch descriptions to clarify need for 'orig_size'. > * Various smaller fixes (see details in patches). > > v2: https://lkml.kernel.org/r/20200915132046.3332537-1-elver@google.com > * Various comment/documentation changes (see details in patches). > * Various smaller fixes (see details in patches). > * Change all reports to reference the kfence object, "kfence-#nn". > * Skip allocation/free internals stack trace. > * Rework KMEMLEAK compatibility patch. > > RFC/v1: https://lkml.kernel.org/r/20200907134055.2878499-1-elver@google.com > > Alexander Potapenko (6): > mm: add Kernel Electric-Fence infrastructure > x86, kfence: enable KFENCE for x86 > mm, kfence: insert KFENCE hooks for SLAB > mm, kfence: insert KFENCE hooks for SLUB > kfence, kasan: make KFENCE compatible with KASAN > kfence, kmemleak: make KFENCE compatible with KMEMLEAK > > Marco Elver (4): > arm64, kfence: enable KFENCE for ARM64 > kfence, lockdep: make KFENCE compatible with lockdep > kfence, Documentation: add KFENCE documentation > kfence: add test suite > > Documentation/dev-tools/index.rst | 1 + > Documentation/dev-tools/kfence.rst | 291 +++++++++++ > MAINTAINERS | 11 + > arch/arm64/Kconfig | 1 + > arch/arm64/include/asm/kfence.h | 39 ++ > arch/arm64/mm/fault.c | 4 + > arch/x86/Kconfig | 2 + > arch/x86/include/asm/kfence.h | 60 +++ > arch/x86/mm/fault.c | 4 + > include/linux/kfence.h | 174 +++++++ > init/main.c | 2 + > kernel/locking/lockdep.c | 8 + > lib/Kconfig.debug | 1 + > lib/Kconfig.kfence | 78 +++ > mm/Makefile | 1 + > mm/kasan/common.c | 7 + > mm/kfence/Makefile | 6 + > mm/kfence/core.c | 733 +++++++++++++++++++++++++++ > mm/kfence/kfence.h | 102 ++++ > mm/kfence/kfence_test.c | 777 +++++++++++++++++++++++++++++ > mm/kfence/report.c | 219 ++++++++ > mm/kmemleak.c | 6 + > mm/slab.c | 46 +- > mm/slab_common.c | 6 +- > mm/slub.c | 72 ++- > 25 files changed, 2619 insertions(+), 32 deletions(-) > create mode 100644 Documentation/dev-tools/kfence.rst > create mode 100644 arch/arm64/include/asm/kfence.h > create mode 100644 arch/x86/include/asm/kfence.h > create mode 100644 include/linux/kfence.h > create mode 100644 lib/Kconfig.kfence > create mode 100644 mm/kfence/Makefile > create mode 100644 mm/kfence/core.c > create mode 100644 mm/kfence/kfence.h > create mode 100644 mm/kfence/kfence_test.c > create mode 100644 mm/kfence/report.c > > -- > 2.28.0.681.g6f77f65b4e-goog >