From patchwork Sat Oct 5 10:31:28 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mark Brown X-Patchwork-Id: 833133 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 5474813CABC; Sat, 5 Oct 2024 10:32:46 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124366; cv=none; b=bmIDGzFg0x/SELFKWZ7Zx9ECogbI6ZNjt3UyFOxN7Y//7PrK3BUIIl4mivecw8w5qRFA1e09lxb3j0A3Wy8IA6czP2U/3fvDdhFRMSD0pqO0jMr9//jlrHtPby2o55WvTc4Z6Ky9wXUQC9jssoDFsdYWim0YbpdhZBwOCe6yfC4= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124366; c=relaxed/simple; bh=rf+MEDxyq5lpSjEzC17VYDLpx49FdZdEIHA+inm7+3I=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References: In-Reply-To:To:Cc; b=GEfHnawQ8bpW+SGdaAsG0NHUiAs59o95CrYshBCm4misVK121w8kMG1cnLEr/TuHI/o/ZjM92ds3os6WN+43+6Dkx5ouwzDXzIV1+nPZlVpyJX1zY8A14hfca3RnF5jNAXD3NjUghxlIeP9TBUnJ8Dl8wNZDe3SWWkpGE8GhUkI= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=fdNcZ9tl; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="fdNcZ9tl" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 4CFBEC4CECC; Sat, 5 Oct 2024 10:32:40 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1728124366; bh=rf+MEDxyq5lpSjEzC17VYDLpx49FdZdEIHA+inm7+3I=; h=From:Date:Subject:References:In-Reply-To:To:Cc:From; b=fdNcZ9tlGNhkuO5FXRMkZdrubzKst+VlgcAYKKWu/gOF77q6lgripJK2t/NWaKywk gZEauIlVabQp1g3+K/Vxt5yqc2XbKBjmzDAPGwtpPAvdtVDzeV80ltU8l7iQkeKXkw gtFnBzFPn63iByZw/tWQXYH3+3+on23cf6wq1s6HxALCBIIQppI3fhmqcI2+GAiTFW N6SUycq0quVRCf1E8xX1ufAU6sIH7ORpetglhCqjcL6F4UYmatFQjWUE/OZzSaXs2K qa15JXTM7bH+K9+Z0YgiqYHeUwuAiW4oaGc0uwIB8gCrGenC6lVdlWKZaimweeLx41 qvp2jxSdexOtg== From: Mark Brown Date: Sat, 05 Oct 2024 11:31:28 +0100 Subject: [PATCH RFT v11 1/8] arm64/gcs: Return a success value from gcs_alloc_thread_stack() Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-Id: <20241005-clone3-shadow-stack-v11-1-2a6a2bd6d651@kernel.org> References: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> In-Reply-To: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> To: "Rick P. Edgecombe" , Deepak Gupta , Szabolcs Nagy , "H.J. Lu" , Florian Weimer , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Mel Gorman , Valentin Schneider , Christian Brauner , Shuah Khan Cc: linux-kernel@vger.kernel.org, Catalin Marinas , Will Deacon , jannh@google.com, bsegall@google.com, Yury Khrustalev , Wilco Dijkstra , linux-kselftest@vger.kernel.org, linux-api@vger.kernel.org, Mark Brown , Kees Cook X-Mailer: b4 0.15-dev-9b746 X-Developer-Signature: v=1; a=openpgp-sha256; l=3830; i=broonie@kernel.org; h=from:subject:message-id; bh=rf+MEDxyq5lpSjEzC17VYDLpx49FdZdEIHA+inm7+3I=; b=owEBbQGS/pANAwAKASTWi3JdVIfQAcsmYgBnARW7jkAXlWGa990NpPMJQi9DYqZqsGTxzykS7RGO QpQ8MtyJATMEAAEKAB0WIQSt5miqZ1cYtZ/in+ok1otyXVSH0AUCZwEVuwAKCRAk1otyXVSH0J7TB/ 40ecD3G67gCAjpR/gGTsXhHLA0alA2Hh4B8XtOuGXArMi1pLWe8HiYF8wGUHkgAoDMEabZJfuXZpDS du88xSgnlMaZSnsCGPDJVc6IwBqaJjitnzImoiUJdpbjtZZjsYTnQyalOaIKsPV99kRdAMjExm9Q1y HKDPZ1xBa+3S7dEu1/W6rB0Fr0hvuuMr2JBUloQxLqvDsfHUKi+r/W6Kn3eyuL/VVe0/EsKuJRBmNc smadltIUsePM+VqSKb+3L9cf+XZLAVmeGF3qqyv2tzz/TJJIofSYTcfy1xkSqgPmS/SIO2h9ga/7sn byvUEfZskrjPo9p/ZD9FdPZCcIeZIA X-Developer-Key: i=broonie@kernel.org; a=openpgp; fpr=3F2568AAC26998F9E813A1C5C3F436CA30F5D8EB Currently as a result of templating from x86 code gcs_alloc_thread_stack() returns a pointer as an unsigned int however on arm64 we don't actually use this pointer value as anything other than a pass/fail flag. Simplify the interface to just return an int with 0 on success and a negative error code on failure. Signed-off-by: Mark Brown --- arch/arm64/include/asm/gcs.h | 8 ++++---- arch/arm64/kernel/process.c | 8 ++++---- arch/arm64/mm/gcs.c | 8 ++++---- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/arch/arm64/include/asm/gcs.h b/arch/arm64/include/asm/gcs.h index f50660603ecf5dc09a92740062df3a089b02b219..d8923b5f03b776252aca76ce316ef57399d71fa9 100644 --- a/arch/arm64/include/asm/gcs.h +++ b/arch/arm64/include/asm/gcs.h @@ -64,8 +64,8 @@ static inline bool task_gcs_el0_enabled(struct task_struct *task) void gcs_set_el0_mode(struct task_struct *task); void gcs_free(struct task_struct *task); void gcs_preserve_current_state(void); -unsigned long gcs_alloc_thread_stack(struct task_struct *tsk, - const struct kernel_clone_args *args); +int gcs_alloc_thread_stack(struct task_struct *tsk, + const struct kernel_clone_args *args); static inline int gcs_check_locked(struct task_struct *task, unsigned long new_val) @@ -91,8 +91,8 @@ static inline bool task_gcs_el0_enabled(struct task_struct *task) static inline void gcs_set_el0_mode(struct task_struct *task) { } static inline void gcs_free(struct task_struct *task) { } static inline void gcs_preserve_current_state(void) { } -static inline unsigned long gcs_alloc_thread_stack(struct task_struct *tsk, - const struct kernel_clone_args *args) +static inline int gcs_alloc_thread_stack(struct task_struct *tsk, + const struct kernel_clone_args *args) { return -ENOTSUPP; } diff --git a/arch/arm64/kernel/process.c b/arch/arm64/kernel/process.c index fdd095480c3ffb8c13fd4e7c9abc79e88143e08b..8ebd11c29792524dfeeade9cc7826b007329aa6a 100644 --- a/arch/arm64/kernel/process.c +++ b/arch/arm64/kernel/process.c @@ -297,7 +297,7 @@ static void flush_gcs(void) static int copy_thread_gcs(struct task_struct *p, const struct kernel_clone_args *args) { - unsigned long gcs; + int ret; if (!system_supports_gcs()) return 0; @@ -305,9 +305,9 @@ static int copy_thread_gcs(struct task_struct *p, p->thread.gcs_base = 0; p->thread.gcs_size = 0; - gcs = gcs_alloc_thread_stack(p, args); - if (IS_ERR_VALUE(gcs)) - return PTR_ERR((void *)gcs); + ret = gcs_alloc_thread_stack(p, args); + if (ret != 0) + return ret; p->thread.gcs_el0_mode = current->thread.gcs_el0_mode; p->thread.gcs_el0_locked = current->thread.gcs_el0_locked; diff --git a/arch/arm64/mm/gcs.c b/arch/arm64/mm/gcs.c index 5c46ec527b1cdaa8f52cff445d70ba0f8509d086..1f633a482558b59aac5427963d42b37fce08c8a6 100644 --- a/arch/arm64/mm/gcs.c +++ b/arch/arm64/mm/gcs.c @@ -38,8 +38,8 @@ static unsigned long gcs_size(unsigned long size) return max(PAGE_SIZE, size); } -unsigned long gcs_alloc_thread_stack(struct task_struct *tsk, - const struct kernel_clone_args *args) +int gcs_alloc_thread_stack(struct task_struct *tsk, + const struct kernel_clone_args *args) { unsigned long addr, size; @@ -59,13 +59,13 @@ unsigned long gcs_alloc_thread_stack(struct task_struct *tsk, size = gcs_size(size); addr = alloc_gcs(0, size); if (IS_ERR_VALUE(addr)) - return addr; + return PTR_ERR((void *)addr); tsk->thread.gcs_base = addr; tsk->thread.gcs_size = size; tsk->thread.gcspr_el0 = addr + size - sizeof(u64); - return addr; + return 0; } SYSCALL_DEFINE3(map_shadow_stack, unsigned long, addr, unsigned long, size, unsigned int, flags) From patchwork Sat Oct 5 10:31:30 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mark Brown X-Patchwork-Id: 833132 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id ED9D5148307; Sat, 5 Oct 2024 10:32:58 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124380; cv=none; b=HobEiV4Dg/qMpASaTGl/T3QZsyjNPKG80Pv/lPXzHOk8s9JUANKoobEZUFC6+JPGGa2/ItAM4M982dk2xKsa5xpuswANu6me6HvFfq1jbvGsjOCWyJYLLcblBM6yJQzlbHxvF0xD5JGfugVlfYd9+cK6TmPzhds/H+oziHX30+g= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124380; c=relaxed/simple; bh=5R2x8naFdQiQL8xwTf6W/tsDu9xiZhpQtf9OK3u1Lgo=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References: In-Reply-To:To:Cc; b=EDoAfjDu/mImkEz1Qk8ltygfUaVFik5ZJtbg/C9awespvPjxQ3aNPGW9yDwlwPVZO8o0+ledYxCdFxetcE0kKwVaZVahoqiC5gdSFnERP4LuqxqLqSIHuoGrDSa7Cx08bRVM9EAsa7kqvQdkOOFWpu4pgHRx8hNJFlw6Hz87isk= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=chTHwqWb; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="chTHwqWb" Received: by smtp.kernel.org (Postfix) with ESMTPSA id B36E8C4CED0; Sat, 5 Oct 2024 10:32:52 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1728124378; bh=5R2x8naFdQiQL8xwTf6W/tsDu9xiZhpQtf9OK3u1Lgo=; h=From:Date:Subject:References:In-Reply-To:To:Cc:From; b=chTHwqWb619AnRNG396WYEeqvvdB9FEVZUbWNrlwaCyKungTW7oIKbpziDVU0VYYt yT49fSu69CMQ4f0iP2MwOqpaTP8dbpvvggZCjluuwgOrITBDxNq+JwdJpQOZLipHXE 4vxVK543p1qeqJwNFpK6nVcW2BsCr00WgJxNm7p0ztGSNChtaY5GNEPHqKjjOigqnk llgv8c57zwRpe4Zze8vSJBfV/mQQ+BPjsQue1ryUvTuV8B+fnSaGAhNBpHDrjihfWr kRAIAQZiJXx/eYP/8OZOoQGsbxmvKEsYqEaE/Hi/QiP3bK3Pdw/AY0tFnfSzpJY8/H VlRLgyxR99HFg== From: Mark Brown Date: Sat, 05 Oct 2024 11:31:30 +0100 Subject: [PATCH RFT v11 3/8] selftests: Provide helper header for shadow stack testing Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-Id: <20241005-clone3-shadow-stack-v11-3-2a6a2bd6d651@kernel.org> References: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> In-Reply-To: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> To: "Rick P. Edgecombe" , Deepak Gupta , Szabolcs Nagy , "H.J. Lu" , Florian Weimer , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Mel Gorman , Valentin Schneider , Christian Brauner , Shuah Khan Cc: linux-kernel@vger.kernel.org, Catalin Marinas , Will Deacon , jannh@google.com, bsegall@google.com, Yury Khrustalev , Wilco Dijkstra , linux-kselftest@vger.kernel.org, linux-api@vger.kernel.org, Mark Brown , Kees Cook , Kees Cook , Shuah Khan X-Mailer: b4 0.15-dev-9b746 X-Developer-Signature: v=1; a=openpgp-sha256; l=4486; i=broonie@kernel.org; h=from:subject:message-id; bh=5R2x8naFdQiQL8xwTf6W/tsDu9xiZhpQtf9OK3u1Lgo=; b=owEBbQGS/pANAwAKASTWi3JdVIfQAcsmYgBnARW9l13Q/URJlro/qKJBEDZNVr3sOrKNsNDeoBFP 3BIn/5CJATMEAAEKAB0WIQSt5miqZ1cYtZ/in+ok1otyXVSH0AUCZwEVvQAKCRAk1otyXVSH0I39B/ 91+8sD63KbXfuIMCuGIU4QtYu+5RGzTPwzPsI0jmsQLaO2s2r2COTzi1yAK3L/ny4stkdQLwpYBfSV /AcLu2VEuCZ2uyjjaJ6bGK9l2Tma/C4DZ+GfioFbxmmP1X2KhiMfzJMYhk9YMPadmmoGUd/g7Pg89g +phIKXEH4DfGkHiDBlC6+kjZiiFzPbbpfSBsCTlRp0Obnt1AvhsvM/+fVp9CA4r3DxF74pQbeEKeAw cy5mdN0tco0qMcDQ/8VgF5HchWNgVdNrnagYBJ+uZtlSyM01I8b/70np1HdN61kzb33hcw8fr+r695 qs/lUuQet2p8HaFn1Neza2LvPAHsO8 X-Developer-Key: i=broonie@kernel.org; a=openpgp; fpr=3F2568AAC26998F9E813A1C5C3F436CA30F5D8EB While almost all users of shadow stacks should be relying on the dynamic linker and libc to enable the feature there are several low level test programs where it is useful to enable without any libc support, allowing testing without full system enablement. This low level testing is helpful during bringup of the support itself, and also in enabling coverage by automated testing without needing all system components in the target root filesystems to have enablement. Provide a header with helpers for this purpose, intended for use only by test programs directly exercising shadow stack interfaces. Reviewed-by: Rick Edgecombe Reviewed-by: Kees Cook Tested-by: Kees Cook Acked-by: Shuah Khan Signed-off-by: Mark Brown --- tools/testing/selftests/ksft_shstk.h | 98 ++++++++++++++++++++++++++++++++++++ 1 file changed, 98 insertions(+) diff --git a/tools/testing/selftests/ksft_shstk.h b/tools/testing/selftests/ksft_shstk.h new file mode 100644 index 0000000000000000000000000000000000000000..869ecea2bf3ea3d30cead9819d2b3a75f5397754 --- /dev/null +++ b/tools/testing/selftests/ksft_shstk.h @@ -0,0 +1,98 @@ +/* SPDX-License-Identifier: GPL-2.0-only */ +/* + * Helpers for shadow stack enablement, this is intended to only be + * used by low level test programs directly exercising interfaces for + * working with shadow stacks. + * + * Copyright (C) 2024 ARM Ltd. + */ + +#ifndef __KSFT_SHSTK_H +#define __KSFT_SHSTK_H + +#include + +/* This is currently only defined for x86 */ +#ifndef SHADOW_STACK_SET_TOKEN +#define SHADOW_STACK_SET_TOKEN (1ULL << 0) +#endif + +static bool shadow_stack_enabled; + +#ifdef __x86_64__ +#define ARCH_SHSTK_ENABLE 0x5001 +#define ARCH_SHSTK_SHSTK (1ULL << 0) + +#define ARCH_PRCTL(arg1, arg2) \ +({ \ + long _ret; \ + register long _num asm("eax") = __NR_arch_prctl; \ + register long _arg1 asm("rdi") = (long)(arg1); \ + register long _arg2 asm("rsi") = (long)(arg2); \ + \ + asm volatile ( \ + "syscall\n" \ + : "=a"(_ret) \ + : "r"(_arg1), "r"(_arg2), \ + "0"(_num) \ + : "rcx", "r11", "memory", "cc" \ + ); \ + _ret; \ +}) + +#define ENABLE_SHADOW_STACK +static inline __attribute__((always_inline)) void enable_shadow_stack(void) +{ + int ret = ARCH_PRCTL(ARCH_SHSTK_ENABLE, ARCH_SHSTK_SHSTK); + if (ret == 0) + shadow_stack_enabled = true; +} + +#endif + +#ifdef __aarch64__ +#define PR_SET_SHADOW_STACK_STATUS 75 +# define PR_SHADOW_STACK_ENABLE (1UL << 0) + +#define my_syscall2(num, arg1, arg2) \ +({ \ + register long _num __asm__ ("x8") = (num); \ + register long _arg1 __asm__ ("x0") = (long)(arg1); \ + register long _arg2 __asm__ ("x1") = (long)(arg2); \ + register long _arg3 __asm__ ("x2") = 0; \ + register long _arg4 __asm__ ("x3") = 0; \ + register long _arg5 __asm__ ("x4") = 0; \ + \ + __asm__ volatile ( \ + "svc #0\n" \ + : "=r"(_arg1) \ + : "r"(_arg1), "r"(_arg2), \ + "r"(_arg3), "r"(_arg4), \ + "r"(_arg5), "r"(_num) \ + : "memory", "cc" \ + ); \ + _arg1; \ +}) + +#define ENABLE_SHADOW_STACK +static inline __attribute__((always_inline)) void enable_shadow_stack(void) +{ + int ret; + + ret = my_syscall2(__NR_prctl, PR_SET_SHADOW_STACK_STATUS, + PR_SHADOW_STACK_ENABLE); + if (ret == 0) + shadow_stack_enabled = true; +} + +#endif + +#ifndef __NR_map_shadow_stack +#define __NR_map_shadow_stack 453 +#endif + +#ifndef ENABLE_SHADOW_STACK +static inline void enable_shadow_stack(void) { } +#endif + +#endif From patchwork Sat Oct 5 10:31:32 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mark Brown X-Patchwork-Id: 833131 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9479013BC11; Sat, 5 Oct 2024 10:33:12 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124392; cv=none; b=oz/ygrcLn+e9nv702W7YB9M8FIb14Mn5pnsq7eLZq4jlWnOdLTymtatxz2UEUY54F2zfIkVTy/6S/eIVKXu6mrIDltm58PkXM+Qml0cejD8VRg54DNNt8I6VEZ+KC94FwfX1Cjq5wKNmVtHHJt1W8f0MbqMWqv5zJ3Gy3YV5k7E= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124392; c=relaxed/simple; bh=429Rfem38BUZ9Ha+P7tmsQvwi4MZGvihbGBHtztpEwE=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References: In-Reply-To:To:Cc; b=j5yeELjkTWyyibP+onJ0CFioHkuxbOaozEHXWzL3v/bJ9qumFIvi6FfM7jiyOH1cf8bJd9xmTE5oaXCtqqwF5+QkGVaQE0AU5yMG3QcziQiFK8wC6afM1oAXtJCctV9/a+tX/X4vb1Rxl0FjWNMGgwfm/6QXjhwzQhhy691qCZs= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=GyH7ieI9; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="GyH7ieI9" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 4D67AC4CECC; Sat, 5 Oct 2024 10:33:05 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1728124392; bh=429Rfem38BUZ9Ha+P7tmsQvwi4MZGvihbGBHtztpEwE=; h=From:Date:Subject:References:In-Reply-To:To:Cc:From; b=GyH7ieI9Jb8nOzKWNnRdtxc9ypNYVPYtPGOR4L0pGp+1DbjymDxzqO9CceAxdhKOS YAI2AgK1cdXkUi3f9YQzsEDg8txMPhFLBTanTYpf6bXDbP+GyLDPFuMy2Q3oDv48f5 8mRn5sJuPc05/QKCgaI1uEcu30OWcmJsxOWuI+MbXSuAMMU4k6JAmimhJhO2cQhujb evVfUio08stPuqTfGxnBXhHOPixCJJK0aKe1I9NPZ3seDlMik1n3fSG/zFO6sVI/sl xRbTXwwJadJLUha+piV8kGKXwkqXbVAKVzopGjDBBfxt1qoVTxvJHhTye53Ya1V6i7 dtNn4dSYbW/qw== From: Mark Brown Date: Sat, 05 Oct 2024 11:31:32 +0100 Subject: [PATCH RFT v11 5/8] selftests/clone3: Remove redundant flushes of output streams Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-Id: <20241005-clone3-shadow-stack-v11-5-2a6a2bd6d651@kernel.org> References: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> In-Reply-To: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> To: "Rick P. Edgecombe" , Deepak Gupta , Szabolcs Nagy , "H.J. Lu" , Florian Weimer , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Mel Gorman , Valentin Schneider , Christian Brauner , Shuah Khan Cc: linux-kernel@vger.kernel.org, Catalin Marinas , Will Deacon , jannh@google.com, bsegall@google.com, Yury Khrustalev , Wilco Dijkstra , linux-kselftest@vger.kernel.org, linux-api@vger.kernel.org, Mark Brown , Kees Cook , Kees Cook , Shuah Khan X-Mailer: b4 0.15-dev-9b746 X-Developer-Signature: v=1; a=openpgp-sha256; l=1114; i=broonie@kernel.org; h=from:subject:message-id; bh=429Rfem38BUZ9Ha+P7tmsQvwi4MZGvihbGBHtztpEwE=; b=owEBbQGS/pANAwAKASTWi3JdVIfQAcsmYgBnARW+9td3kWcf+jMf9S+ta1Rptcq4kXdmGzx9uzgd DSbMsJWJATMEAAEKAB0WIQSt5miqZ1cYtZ/in+ok1otyXVSH0AUCZwEVvgAKCRAk1otyXVSH0E7SB/ 9TYgkUROHh5SzmPnIP6PJ0VCqOATolw6jRR+E4HG5NjNtUg4gXy+hNWTEhQ24FqEm2DLHpyFDLK/rT ffryWZyS1iVfSniHMhKanbuPRmGdO+z1xoISwEKQUvJWcB68aHD9z1sLX5N12pisGr2KZqE/7pHF+F 0g5/q8IrB6gVBBQfaHh+Tg0sAnhBM4LbMP9a8RIYCGkxgiYBL6hHcNpB2wXs3S4kmTHjDOH8j0o6rg YJMUlRCfsdj69anI/ckbB7SFEXQ/It3PG3Cw/hQ0b3Q/3O1Ni0QbRFMCyIxtYRnbsymm/kBGDpYsJi Z8lMHPd2SeMIjG8KO4glBFOFnPhYjl X-Developer-Key: i=broonie@kernel.org; a=openpgp; fpr=3F2568AAC26998F9E813A1C5C3F436CA30F5D8EB Since there were widespread issues with output not being flushed the kselftest framework was modified to explicitly set the output streams unbuffered in commit 58e2847ad2e6 ("selftests: line buffer test program's stdout") so there is no need to explicitly flush in the clone3 tests. Reviewed-by: Kees Cook Tested-by: Kees Cook Acked-by: Shuah Khan Signed-off-by: Mark Brown --- tools/testing/selftests/clone3/clone3_selftests.h | 2 -- 1 file changed, 2 deletions(-) diff --git a/tools/testing/selftests/clone3/clone3_selftests.h b/tools/testing/selftests/clone3/clone3_selftests.h index 3d2663fe50ba56f011629e4f2eb68a72bcceb087..39b5dcba663c30b9fc2542d9a0d2686105ce5761 100644 --- a/tools/testing/selftests/clone3/clone3_selftests.h +++ b/tools/testing/selftests/clone3/clone3_selftests.h @@ -35,8 +35,6 @@ struct __clone_args { static pid_t sys_clone3(struct __clone_args *args, size_t size) { - fflush(stdout); - fflush(stderr); return syscall(__NR_clone3, args, size); } From patchwork Sat Oct 5 10:31:34 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mark Brown X-Patchwork-Id: 833130 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D6A991494BB; Sat, 5 Oct 2024 10:33:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124407; cv=none; b=Q7aFmsHp9Q+HrGYbJYHyj7eW0TqhFFC0rytHDUSPKRzjX7LRED1lzFKH6wOrMMLGUn5/J07BXuUW2G5wBNqRuJ8SOkuGmSV4fTcr7Om2e3onOV7Lxk/PISw+htfz33jFl6Q/zRC8n1QmSPl6EG2KvzVrhZCIADtLUVaorskb6tA= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1728124407; c=relaxed/simple; bh=ewkcoFxIGUXL89FiyDyA2YmTyVasTMHDLRraAejpYow=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References: In-Reply-To:To:Cc; b=KANxyW9LzhUAncpcLJwLdp6sMQdV+0fAhM5n/V4J7DzMpUDYOasDCu+jEaqzvyelAqinxfRRVbArCft97NDcPiv8GBOlLNO3HFA2tLV6KoeN8sey5DSreJNm5VS5EkEtSb03NMv2Wwslt5Vk7SWfBAxtobiAp+YcVpeSAvb8A8o= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=iq2MPxUV; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="iq2MPxUV" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 57F06C4CEC2; Sat, 5 Oct 2024 10:33:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1728124407; bh=ewkcoFxIGUXL89FiyDyA2YmTyVasTMHDLRraAejpYow=; h=From:Date:Subject:References:In-Reply-To:To:Cc:From; b=iq2MPxUVuM2WADq8mS7X0xIS2dpHTCo3n9bHt7wbUwro62Idzj4apa4aVk1q13jxB ZooXYJ8ujykjeV7hp0xrGRZZPr3VPAwbtSfw8wwRUT6vUfcJeMjddUkOu7rOD/TN7w ZP1TUjUrPXz9CvabP/XcB16xz3CA2qPhtZqq5MT5Qg0KVlw3lrGx2VPIfMEg8IJbRC X3wACE3fNJYz3DpJwjvQp6Y1q6gCgoSlYqKWoMbKSKldsm+RkUMouiebFS5530kl/y J6Gnfd8ViaQoAW+xY419hkvEeH91sa/Qwbd5GTsfqZ7eG79EsUKRuvbsMrqcFHUDrq hP7Rs/3pgj1Zw== From: Mark Brown Date: Sat, 05 Oct 2024 11:31:34 +0100 Subject: [PATCH RFT v11 7/8] selftests/clone3: Allow tests to flag if -E2BIG is a valid error code Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-Id: <20241005-clone3-shadow-stack-v11-7-2a6a2bd6d651@kernel.org> References: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> In-Reply-To: <20241005-clone3-shadow-stack-v11-0-2a6a2bd6d651@kernel.org> To: "Rick P. Edgecombe" , Deepak Gupta , Szabolcs Nagy , "H.J. Lu" , Florian Weimer , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Mel Gorman , Valentin Schneider , Christian Brauner , Shuah Khan Cc: linux-kernel@vger.kernel.org, Catalin Marinas , Will Deacon , jannh@google.com, bsegall@google.com, Yury Khrustalev , Wilco Dijkstra , linux-kselftest@vger.kernel.org, linux-api@vger.kernel.org, Mark Brown , Kees Cook , Kees Cook , Shuah Khan X-Mailer: b4 0.15-dev-9b746 X-Developer-Signature: v=1; a=openpgp-sha256; l=2075; i=broonie@kernel.org; h=from:subject:message-id; bh=ewkcoFxIGUXL89FiyDyA2YmTyVasTMHDLRraAejpYow=; b=owEBbQGS/pANAwAKASTWi3JdVIfQAcsmYgBnARXAze7RkiwBwKf6+LuNfjV37wR/IjY8FreITLGw XNE7/YyJATMEAAEKAB0WIQSt5miqZ1cYtZ/in+ok1otyXVSH0AUCZwEVwAAKCRAk1otyXVSH0CPzB/ 9KoO7+Vb5jk+6ghKycsRFQy9Nvpcuk8pFGgkWEBtGE4txvdiDpjZnk5HpNjnaMgMcjg5lmgMPeovRM kEStv411wfmOPC5lC5/21deqkmsAQdcN0/zFfzG90jWJwev1xtEn/VS7UYaG+HrIXP3yT9B7WZkbzj zvXnsH5RPoudmBUmnT3dJLkh1NHRveU+tcpQJ6tN2aiIYORyTiTYVVa+PGzyTf/jm9wKCRagFpiDQv FAsfTzL1I0HL83UivqYcGYm73CJJ08DInSkWuH20MitXpLE9Kjlee3CcMu5KKeaBezmfGFae9MvT9U LdnFq0W+Qzd3L75xgpsqJP2aiJZr6U X-Developer-Key: i=broonie@kernel.org; a=openpgp; fpr=3F2568AAC26998F9E813A1C5C3F436CA30F5D8EB The clone_args structure is extensible, with the syscall passing in the length of the structure. Inside the kernel we use copy_struct_from_user() to read the struct but this has the unfortunate side effect of silently accepting some overrun in the structure size providing the extra data is all zeros. This means that we can't discover the clone3() features that the running kernel supports by simply probing with various struct sizes. We need to check this for the benefit of test systems which run newer kselftests on old kernels. Add a flag which can be set on a test to indicate that clone3() may return -E2BIG due to the use of newer struct versions. Currently no tests need this but it will become an issue for testing clone3() support for shadow stacks, the support for shadow stacks is already present on x86. Reviewed-by: Kees Cook Tested-by: Kees Cook Acked-by: Shuah Khan Signed-off-by: Mark Brown --- tools/testing/selftests/clone3/clone3.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tools/testing/selftests/clone3/clone3.c b/tools/testing/selftests/clone3/clone3.c index e066b201fa64eb17c55939b7cec18ac5d109613b..5b8b7d640e70132242fc6939450669acd0c534f9 100644 --- a/tools/testing/selftests/clone3/clone3.c +++ b/tools/testing/selftests/clone3/clone3.c @@ -39,6 +39,7 @@ struct test { size_t size; size_function size_function; int expected; + bool e2big_valid; enum test_mode test_mode; filter_function filter; }; @@ -146,6 +147,11 @@ static void test_clone3(const struct test *test) ksft_print_msg("[%d] clone3() with flags says: %d expected %d\n", getpid(), ret, test->expected); if (ret != test->expected) { + if (test->e2big_valid && ret == -E2BIG) { + ksft_print_msg("Test reported -E2BIG\n"); + ksft_test_result_skip("%s\n", test->name); + return; + } ksft_print_msg( "[%d] Result (%d) is different than expected (%d)\n", getpid(), ret, test->expected);