{"id":816508,"url":"http://patchwork.ozlabs.org/api/patches/816508/?format=json","web_url":"http://patchwork.ozlabs.org/project/netdev/patch/1505940337-79069-30-git-send-email-keescook@chromium.org/","project":{"id":7,"url":"http://patchwork.ozlabs.org/api/projects/7/?format=json","name":"Linux network development","link_name":"netdev","list_id":"netdev.vger.kernel.org","list_email":"netdev@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<1505940337-79069-30-git-send-email-keescook@chromium.org>","list_archive_url":null,"date":"2017-09-20T20:45:35","name":"[v3,29/31] arm: Implement thread_struct whitelist for hardened usercopy","commit_ref":null,"pull_url":null,"state":"not-applicable","archived":true,"hash":"2e2a050b3fe4504c31f2a419900e398ec237dee5","submitter":{"id":10641,"url":"http://patchwork.ozlabs.org/api/people/10641/?format=json","name":"Kees Cook","email":"keescook@chromium.org"},"delegate":{"id":34,"url":"http://patchwork.ozlabs.org/api/users/34/?format=json","username":"davem","first_name":"David","last_name":"Miller","email":"davem@davemloft.net"},"mbox":"http://patchwork.ozlabs.org/project/netdev/patch/1505940337-79069-30-git-send-email-keescook@chromium.org/mbox/","series":[{"id":4231,"url":"http://patchwork.ozlabs.org/api/series/4231/?format=json","web_url":"http://patchwork.ozlabs.org/project/netdev/list/?series=4231","date":"2017-09-20T20:45:22","name":"Hardened usercopy whitelisting","version":3,"mbox":"http://patchwork.ozlabs.org/series/4231/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/816508/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/816508/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":"patchwork-incoming@ozlabs.org","Delivered-To":"patchwork-incoming@ozlabs.org","Authentication-Results":["ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netdev-owner@vger.kernel.org;\n\treceiver=)","ozlabs.org; dkim=pass (1024-bit key;\n\tunprotected) header.d=chromium.org header.i=@chromium.org\n\theader.b=\"CGh/MqFH\"; dkim-atps=neutral"],"Received":["from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3xyBtR4qZdz9s8J\n\tfor ;\n\tThu, 21 Sep 2017 06:58:55 +1000 (AEST)","(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1752112AbdITUwz (ORCPT );\n\tWed, 20 Sep 2017 16:52:55 -0400","from mail-pf0-f178.google.com ([209.85.192.178]:51345 \"EHLO\n\tmail-pf0-f178.google.com\" rhost-flags-OK-OK-OK-OK) by vger.kernel.org\n\twith ESMTP id S1752089AbdITUwv (ORCPT\n\t); Wed, 20 Sep 2017 16:52:51 -0400","by mail-pf0-f178.google.com with SMTP id b70so2114074pfl.8\n\tfor ; Wed, 20 Sep 2017 13:52:51 -0700 (PDT)","from www.outflux.net\n\t(173-164-112-133-Oregon.hfc.comcastbusiness.net. [173.164.112.133])\n\tby smtp.gmail.com with ESMTPSA id\n\tj68sm9758488pfa.93.2017.09.20.13.52.45\n\t(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\n\tWed, 20 Sep 2017 13:52:46 -0700 (PDT)"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=chromium.org; s=google;\n\th=from:to:cc:subject:date:message-id:in-reply-to:references;\n\tbh=r5x+vswUmh+buKd45B8ZY2A/QYlK3ymQmShGf2SFSEM=;\n\tb=CGh/MqFHHxl8ITsdcW+B822e7YQJWSmIDxf5R5JdPMxN2oHk++077gSb96hgCXS/+2\n\tA/bKTjf+85TuhwGbJfAtozOJLXQ9o4d/S8QpDYQXXXkUsHA95mCXhH/5EEW49D4btv1O\n\tWJWHiWjPRyHXQrbjXcdNUuINj+EoauemlME8w=","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to\n\t:references;\n\tbh=r5x+vswUmh+buKd45B8ZY2A/QYlK3ymQmShGf2SFSEM=;\n\tb=S9pLacYhy52YQ2uZM0Lp46PxEIh8+dxs9qAFOARgnv6djYi1qswTDhU+E6fZjHf8uI\n\tgl/jJFOed7VbqkhFvoPOnbdmRKoB/ymOqjPZsYkYcvn+hnGOaPa4WK9k23Axt8grRFkQ\n\tuNZFl9fDEcDt+zQYwm//4/IUCKIZM8MNqvL6oU3WLXLi/ejTKlNc3TeZ2I1zCYPXCAjs\n\tKwuzLdr5rbeIoKp3rAnoHAgvOTWgM9T2bcD0fWaVSvht+6lEs14Y/EqjvfJPC8cvLkdQ\n\t2sRykC/NI72XDVBaq2pG4aNUojeHc6xj/I8L0UXxGpJ1qohwk0PlmVswhMLkjTlRO7wg\n\t59Lw==","X-Gm-Message-State":"AHPjjUiD+SWA/4sc2V2TbhULjb1XIe87gyTaaxSk3ahviNm3ks9KrthX\n\teL1u4jCaxKWMFyfVQ+gu95xGJA==","X-Google-Smtp-Source":"AOwi7QDgw/j68/+blyqszg/lM0jrH0GWjCpvykB3+Wapql/0TftucT95m7aWqxt5mstxpt9tn9YpRQ==","X-Received":"by 10.84.229.71 with SMTP id d7mr3217844pln.417.1505940771447;\n\tWed, 20 Sep 2017 13:52:51 -0700 (PDT)","From":"Kees Cook ","To":"linux-kernel@vger.kernel.org","Cc":"Kees Cook , Russell King ,\n\tIngo Molnar ,\n\tChristian Borntraeger ,\n\t\"Peter Zijlstra (Intel)\" ,\n\tlinux-arm-kernel@lists.infradead.org,\n\tlinux-fsdevel@vger.kernel.org, netdev@vger.kernel.org,\n\tlinux-mm@kvack.org, kernel-hardening@lists.openwall.com,\n\tDavid Windsor ","Subject":"[PATCH v3 29/31] arm: Implement thread_struct whitelist for\n\thardened usercopy","Date":"Wed, 20 Sep 2017 13:45:35 -0700","Message-Id":"<1505940337-79069-30-git-send-email-keescook@chromium.org>","X-Mailer":"git-send-email 2.7.4","In-Reply-To":"<1505940337-79069-1-git-send-email-keescook@chromium.org>","References":"<1505940337-79069-1-git-send-email-keescook@chromium.org>","Sender":"netdev-owner@vger.kernel.org","Precedence":"bulk","List-ID":"","X-Mailing-List":"netdev@vger.kernel.org"},"content":"ARM does not carry FPU state in the thread structure, so it can declare\nno usercopy whitelist at all.\n\nCc: Russell King \nCc: Ingo Molnar \nCc: Christian Borntraeger \nCc: \"Peter Zijlstra (Intel)\" \nCc: linux-arm-kernel@lists.infradead.org\nSigned-off-by: Kees Cook \n---\n arch/arm/Kconfig | 1 +\n arch/arm/include/asm/processor.h | 7 +++++++\n 2 files changed, 8 insertions(+)","diff":"diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig\nindex 7888c9803eb0..4f1ab6c6b8c0 100644\n--- a/arch/arm/Kconfig\n+++ b/arch/arm/Kconfig\n@@ -48,6 +48,7 @@ config ARM\n \tselect HAVE_ARCH_KGDB if !CPU_ENDIAN_BE32 && MMU\n \tselect HAVE_ARCH_MMAP_RND_BITS if MMU\n \tselect HAVE_ARCH_SECCOMP_FILTER if (AEABI && !OABI_COMPAT)\n+\tselect HAVE_ARCH_THREAD_STRUCT_WHITELIST\n \tselect HAVE_ARCH_TRACEHOOK\n \tselect HAVE_ARM_SMCCC if CPU_V7\n \tselect HAVE_EBPF_JIT if !CPU_ENDIAN_BE32\ndiff --git a/arch/arm/include/asm/processor.h b/arch/arm/include/asm/processor.h\nindex c3d5fc124a05..d6dc45c92ee5 100644\n--- a/arch/arm/include/asm/processor.h\n+++ b/arch/arm/include/asm/processor.h\n@@ -45,6 +45,13 @@ struct thread_struct {\n \tstruct debug_info\tdebug;\n };\n \n+/* Nothing needs to be usercopy-whitelisted from thread_struct. */\n+static inline void arch_thread_struct_whitelist(unsigned long *offset,\n+\t\t\t\t\t\tunsigned long *size)\n+{\n+\t*offset = *size = 0;\n+}\n+\n #define INIT_THREAD {\t}\n \n #ifdef CONFIG_MMU\n","prefixes":["v3","29/31"]}