linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH v4 0/2] KASAN double-free detection
@ 2016-05-29 16:10 Kuthonuzo Luruo
  0 siblings, 0 replies; only message in thread
From: Kuthonuzo Luruo @ 2016-05-29 16:10 UTC (permalink / raw)
  To: aryabinin, glider, dvyukov, cl, penberg, rientjes, iamjoonsoo.kim, akpm
  Cc: kasan-dev, linux-kernel, ynorov, kuthonuzo.luruo

Submitting v4 for your review/consideration. First patch provides more
reliable double-free detection for KASAN. Second patch provides new
double-free tests for 'test_kasan'.

"Lock break" on out-of-bounds (OOB) write detection in patch v3 suffers
from one fatal flaw: it's not possible to distinguish between when lock bit
is set because a holder exists or because it got flipped by OOB.

Patch v4 (this patch) solves the issue by exploiting header shadow memory
for storing the per-object header lock bit. This makes locking more
resilient even in the presence of OOB writes on header.

v3 link: https://lkml.org/lkml/2016/5/24/577

Patchset is based on linux-next 'next-20160527'.

Kuthonuzo Luruo (2):
  mm, kasan: improve double-free detection
  kasan: add double-free tests

 include/linux/kasan.h |    7 ++-
 lib/test_kasan.c      |   47 ++++++++++++++++++
 mm/kasan/kasan.c      |  125 ++++++++++++++++++++++++++++++++++++++-----------
 mm/kasan/kasan.h      |   24 +++++++++-
 mm/kasan/quarantine.c |    4 +-
 mm/kasan/report.c     |   24 +++++++++-
 mm/slab.c             |    3 +-
 mm/slub.c             |    2 +-
 8 files changed, 200 insertions(+), 36 deletions(-)

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2016-05-29 16:10 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-05-29 16:10 [PATCH v4 0/2] KASAN double-free detection Kuthonuzo Luruo

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).