[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CA+55aFyf9NkW26BNyEnvUT60u2oXezRiXMexdHy8yx1AD9aUYw@mail.gmail.com>
Date: Mon, 5 Mar 2018 11:18:50 -0800
From: Linus Torvalds <torvalds@...ux-foundation.org>
To: Masahiro Yamada <yamada.masahiro@...ionext.com>
Cc: "Maciej S. Szmigiero" <mail@...iej.szmigiero.name>, Kees Cook <keescook@...omium.org>,
Patrick McLean <chutzpah@...too.org>, Emese Revfy <re.emese@...il.com>,
Al Viro <viro@...iv.linux.org.uk>, Bruce Fields <bfields@...hat.com>,
"Darrick J. Wong" <darrick.wong@...cle.com>,
Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
Linux NFS Mailing List <linux-nfs@...r.kernel.org>, Thorsten Leemhuis <regressions@...mhuis.info>,
"kernel-hardening@...ts.openwall.com" <kernel-hardening@...ts.openwall.com>
Subject: Re: RANDSTRUCT structs need linux/compiler_types.h (Was: [nfsd4]
potentially hardware breaking regression in 4.14-rc and 4.13.11)
On Mon, Mar 5, 2018 at 1:27 AM, Masahiro Yamada
<yamada.masahiro@...ionext.com> wrote:
>
> Can I suggest another way to make it less fragile?
> __attribute((...)) can be placed after 'struct'.
That avoids the actual bug, but it wouldn't have helped _find_ the
problem in the first place.
If somebody ever does the same thing, they'd hit the same issue. And
it's not just __randomize_struct, it's any of our other type markers.
We can say "don't do that", but if there is no automated checking,
it's still ripe to cause problems just because somebody didn't notice.
So I'd rather have something that causes a build failure when
something goes wrong, rather than silently accepting syntax that
wasn't intended.
Linus
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
