[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20170511212538.bjp4jbb7p4qipawo@treble>
Date: Thu, 11 May 2017 16:25:38 -0500
From: Josh Poimboeuf <jpoimboe@...hat.com>
To: Kees Cook <keescook@...omium.org>
Cc: linux-kernel@...r.kernel.org, Peter Zijlstra <peterz@...radead.org>,
PaX Team <pageexec@...email.hu>, Jann Horn <jannh@...gle.com>,
Eric Biggers <ebiggers3@...il.com>,
Christoph Hellwig <hch@...radead.org>,
"axboe@...nel.dk" <axboe@...nel.dk>,
James Bottomley <James.Bottomley@...senpartnership.com>,
Elena Reshetova <elena.reshetova@...el.com>,
Hans Liljestrand <ishkamiel@...il.com>,
David Windsor <dwindsor@...il.com>,
"x86@...nel.org" <x86@...nel.org>, Ingo Molnar <mingo@...nel.org>,
Arnd Bergmann <arnd@...db.de>,
Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
"David S. Miller" <davem@...emloft.net>,
Rik van Riel <riel@...hat.com>,
linux-arch <linux-arch@...r.kernel.org>,
kernel-hardening@...ts.openwall.com
Subject: Re: [PATCH v4 2/2] x86/refcount: Implement fast refcount overflow
protection
On Tue, May 09, 2017 at 12:01:23PM -0700, Kees Cook wrote:
> +#define _REFCOUNT_EXCEPTION \
> + ".pushsection .text.unlikely\n" \
> + "111:\tmovl $0x7fffffff, %[counter]\n" \
> + "112:\t" ASM_UD0 "\n" \
> + ".popsection\n" \
> + "113:\n" \
> + _ASM_EXTABLE_REFCOUNT(112b, 113b)
This resulted in some new objtool warnings because the UD0 instruction
is a dead end in the .text.unlikely section, but it's not annotated as
such. (As opposed to the WARN macros' use of UD0, which aren't dead
ends since they resume execution immediately afterwards).
The below patch creates a UNREACHABLE_ASM macro, similar to the existing
unreachable() macro for C code, which you can call right after the
ASM_UD0 line above to fix the warnings. Feel free to add the patch to
your set.
----
From: Josh Poimboeuf <jpoimboe@...hat.com>
Subject: [PATCH] objtool: create UNREACHABLE_ASM macro
Create an UNREACHABLE_ASM macro to enable inline asm to annotate dead
end code paths. This macro is analagous to the unreachable() macro for
C code.
Also add a couple of comments.
Signed-off-by: Josh Poimboeuf <jpoimboe@...hat.com>
---
include/linux/compiler-gcc.h | 25 +++++++++++++++++++------
1 file changed, 19 insertions(+), 6 deletions(-)
diff --git a/include/linux/compiler-gcc.h b/include/linux/compiler-gcc.h
index 0efef9c..08cdf9e 100644
--- a/include/linux/compiler-gcc.h
+++ b/include/linux/compiler-gcc.h
@@ -198,13 +198,26 @@
#endif
#ifdef CONFIG_STACK_VALIDATION
-#define annotate_unreachable() ({ \
- asm("%c0:\t\n" \
- ".pushsection .discard.unreachable\t\n" \
- ".long %c0b - .\t\n" \
- ".popsection\t\n" : : "i" (__LINE__)); \
-})
+/*
+ * This label needs to be unique to prevent GCC from removing what it sees as
+ * duplicate inline asm statements in a function.
+ */
+#define UNREACHABLE_ASM_LABEL __stringify(__LINE__)
+
+/*
+ * Annotate the previous instruction as unreachable. This allows objtool to
+ * detect dead ends in the code flow.
+ */
+#define UNREACHABLE_ASM \
+ UNREACHABLE_ASM_LABEL ":\n\t" \
+ ".pushsection .discard.unreachable\n\t" \
+ ".long " UNREACHABLE_ASM_LABEL "b - .\n\t" \
+ ".popsection\n"
+
+#define annotate_unreachable() asm(UNREACHABLE_ASM);
+
#else
+#define UNREACHABLE_ASM
#define annotate_unreachable()
#endif
--
2.7.4
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
