Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/816508/?format=api
{ "id": 816508, "url": "http://patchwork.ozlabs.org/api/patches/816508/?format=api", "web_url": "http://patchwork.ozlabs.org/project/netdev/patch/1505940337-79069-30-git-send-email-keescook@chromium.org/", "project": { "id": 7, "url": "http://patchwork.ozlabs.org/api/projects/7/?format=api", "name": "Linux network development", "link_name": "netdev", "list_id": "netdev.vger.kernel.org", "list_email": "netdev@vger.kernel.org", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<1505940337-79069-30-git-send-email-keescook@chromium.org>", "list_archive_url": null, "date": "2017-09-20T20:45:35", "name": "[v3,29/31] arm: Implement thread_struct whitelist for hardened usercopy", "commit_ref": null, "pull_url": null, "state": "not-applicable", "archived": true, "hash": "2e2a050b3fe4504c31f2a419900e398ec237dee5", "submitter": { "id": 10641, "url": "http://patchwork.ozlabs.org/api/people/10641/?format=api", "name": "Kees Cook", "email": "keescook@chromium.org" }, "delegate": { "id": 34, "url": "http://patchwork.ozlabs.org/api/users/34/?format=api", "username": "davem", "first_name": "David", "last_name": "Miller", "email": "davem@davemloft.net" }, "mbox": "http://patchwork.ozlabs.org/project/netdev/patch/1505940337-79069-30-git-send-email-keescook@chromium.org/mbox/", "series": [ { "id": 4231, "url": "http://patchwork.ozlabs.org/api/series/4231/?format=api", "web_url": "http://patchwork.ozlabs.org/project/netdev/list/?series=4231", "date": "2017-09-20T20:45:22", "name": "Hardened usercopy whitelisting", "version": 3, "mbox": "http://patchwork.ozlabs.org/series/4231/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/816508/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/816508/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<netdev-owner@vger.kernel.org>", "X-Original-To": "patchwork-incoming@ozlabs.org", "Delivered-To": "patchwork-incoming@ozlabs.org", "Authentication-Results": [ "ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netdev-owner@vger.kernel.org;\n\treceiver=<UNKNOWN>)", "ozlabs.org; dkim=pass (1024-bit key;\n\tunprotected) header.d=chromium.org header.i=@chromium.org\n\theader.b=\"CGh/MqFH\"; dkim-atps=neutral" ], "Received": [ "from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3xyBtR4qZdz9s8J\n\tfor <patchwork-incoming@ozlabs.org>;\n\tThu, 21 Sep 2017 06:58:55 +1000 (AEST)", "(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1752112AbdITUwz (ORCPT <rfc822;patchwork-incoming@ozlabs.org>);\n\tWed, 20 Sep 2017 16:52:55 -0400", "from mail-pf0-f178.google.com ([209.85.192.178]:51345 \"EHLO\n\tmail-pf0-f178.google.com\" rhost-flags-OK-OK-OK-OK) by vger.kernel.org\n\twith ESMTP id S1752089AbdITUwv (ORCPT\n\t<rfc822;netdev@vger.kernel.org>); Wed, 20 Sep 2017 16:52:51 -0400", "by mail-pf0-f178.google.com with SMTP id b70so2114074pfl.8\n\tfor <netdev@vger.kernel.org>; Wed, 20 Sep 2017 13:52:51 -0700 (PDT)", "from www.outflux.net\n\t(173-164-112-133-Oregon.hfc.comcastbusiness.net. [173.164.112.133])\n\tby smtp.gmail.com with ESMTPSA id\n\tj68sm9758488pfa.93.2017.09.20.13.52.45\n\t(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\n\tWed, 20 Sep 2017 13:52:46 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=chromium.org; s=google;\n\th=from:to:cc:subject:date:message-id:in-reply-to:references;\n\tbh=r5x+vswUmh+buKd45B8ZY2A/QYlK3ymQmShGf2SFSEM=;\n\tb=CGh/MqFHHxl8ITsdcW+B822e7YQJWSmIDxf5R5JdPMxN2oHk++077gSb96hgCXS/+2\n\tA/bKTjf+85TuhwGbJfAtozOJLXQ9o4d/S8QpDYQXXXkUsHA95mCXhH/5EEW49D4btv1O\n\tWJWHiWjPRyHXQrbjXcdNUuINj+EoauemlME8w=", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to\n\t:references;\n\tbh=r5x+vswUmh+buKd45B8ZY2A/QYlK3ymQmShGf2SFSEM=;\n\tb=S9pLacYhy52YQ2uZM0Lp46PxEIh8+dxs9qAFOARgnv6djYi1qswTDhU+E6fZjHf8uI\n\tgl/jJFOed7VbqkhFvoPOnbdmRKoB/ymOqjPZsYkYcvn+hnGOaPa4WK9k23Axt8grRFkQ\n\tuNZFl9fDEcDt+zQYwm//4/IUCKIZM8MNqvL6oU3WLXLi/ejTKlNc3TeZ2I1zCYPXCAjs\n\tKwuzLdr5rbeIoKp3rAnoHAgvOTWgM9T2bcD0fWaVSvht+6lEs14Y/EqjvfJPC8cvLkdQ\n\t2sRykC/NI72XDVBaq2pG4aNUojeHc6xj/I8L0UXxGpJ1qohwk0PlmVswhMLkjTlRO7wg\n\t59Lw==", "X-Gm-Message-State": "AHPjjUiD+SWA/4sc2V2TbhULjb1XIe87gyTaaxSk3ahviNm3ks9KrthX\n\teL1u4jCaxKWMFyfVQ+gu95xGJA==", "X-Google-Smtp-Source": "AOwi7QDgw/j68/+blyqszg/lM0jrH0GWjCpvykB3+Wapql/0TftucT95m7aWqxt5mstxpt9tn9YpRQ==", "X-Received": "by 10.84.229.71 with SMTP id d7mr3217844pln.417.1505940771447;\n\tWed, 20 Sep 2017 13:52:51 -0700 (PDT)", "From": "Kees Cook <keescook@chromium.org>", "To": "linux-kernel@vger.kernel.org", "Cc": "Kees Cook <keescook@chromium.org>, Russell King <linux@armlinux.org.uk>,\n\tIngo Molnar <mingo@kernel.org>,\n\tChristian Borntraeger <borntraeger@de.ibm.com>,\n\t\"Peter Zijlstra (Intel)\" <peterz@infradead.org>,\n\tlinux-arm-kernel@lists.infradead.org,\n\tlinux-fsdevel@vger.kernel.org, netdev@vger.kernel.org,\n\tlinux-mm@kvack.org, kernel-hardening@lists.openwall.com,\n\tDavid Windsor <dave@nullcore.net>", "Subject": "[PATCH v3 29/31] arm: Implement thread_struct whitelist for\n\thardened usercopy", "Date": "Wed, 20 Sep 2017 13:45:35 -0700", "Message-Id": "<1505940337-79069-30-git-send-email-keescook@chromium.org>", "X-Mailer": "git-send-email 2.7.4", "In-Reply-To": "<1505940337-79069-1-git-send-email-keescook@chromium.org>", "References": "<1505940337-79069-1-git-send-email-keescook@chromium.org>", "Sender": "netdev-owner@vger.kernel.org", "Precedence": "bulk", "List-ID": "<netdev.vger.kernel.org>", "X-Mailing-List": "netdev@vger.kernel.org" }, "content": "ARM does not carry FPU state in the thread structure, so it can declare\nno usercopy whitelist at all.\n\nCc: Russell King <linux@armlinux.org.uk>\nCc: Ingo Molnar <mingo@kernel.org>\nCc: Christian Borntraeger <borntraeger@de.ibm.com>\nCc: \"Peter Zijlstra (Intel)\" <peterz@infradead.org>\nCc: linux-arm-kernel@lists.infradead.org\nSigned-off-by: Kees Cook <keescook@chromium.org>\n---\n arch/arm/Kconfig | 1 +\n arch/arm/include/asm/processor.h | 7 +++++++\n 2 files changed, 8 insertions(+)", "diff": "diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig\nindex 7888c9803eb0..4f1ab6c6b8c0 100644\n--- a/arch/arm/Kconfig\n+++ b/arch/arm/Kconfig\n@@ -48,6 +48,7 @@ config ARM\n \tselect HAVE_ARCH_KGDB if !CPU_ENDIAN_BE32 && MMU\n \tselect HAVE_ARCH_MMAP_RND_BITS if MMU\n \tselect HAVE_ARCH_SECCOMP_FILTER if (AEABI && !OABI_COMPAT)\n+\tselect HAVE_ARCH_THREAD_STRUCT_WHITELIST\n \tselect HAVE_ARCH_TRACEHOOK\n \tselect HAVE_ARM_SMCCC if CPU_V7\n \tselect HAVE_EBPF_JIT if !CPU_ENDIAN_BE32\ndiff --git a/arch/arm/include/asm/processor.h b/arch/arm/include/asm/processor.h\nindex c3d5fc124a05..d6dc45c92ee5 100644\n--- a/arch/arm/include/asm/processor.h\n+++ b/arch/arm/include/asm/processor.h\n@@ -45,6 +45,13 @@ struct thread_struct {\n \tstruct debug_info\tdebug;\n };\n \n+/* Nothing needs to be usercopy-whitelisted from thread_struct. */\n+static inline void arch_thread_struct_whitelist(unsigned long *offset,\n+\t\t\t\t\t\tunsigned long *size)\n+{\n+\t*offset = *size = 0;\n+}\n+\n #define INIT_THREAD {\t}\n \n #ifdef CONFIG_MMU\n", "prefixes": [ "v3", "29/31" ] }