Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1242202

Re: [PATCH v6 0/6] KASAN for arm64

Show all headers | View raw

On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote:
> 2015-10-07 13:04 GMT+03:00 Catalin Marinas <catalin.marinas@arm.com>:
> > On Thu, Sep 17, 2015 at 12:38:06PM +0300, Andrey Ryabinin wrote:
> >> As usual patches available in git
> >>       git://github.com/aryabinin/linux.git kasan/arm64v6
> >>
> >> Changes since v5:
> >>  - Rebase on top of 4.3-rc1
> >>  - Fixed EFI boot.
> >>  - Updated Doc/features/KASAN.
> >
> > I tried to merge these patches (apart from the x86 one which is already
> > merged) but it still doesn't boot on Juno as an EFI application.
> >
> 
> 4.3-rc1 was ok and 4.3-rc4 is not. Break caused by 0ce3cc008ec04
> ("arm64/efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME
> regions")
> It introduced sort() call in efi_get_virtmap().
> sort() is generic kernel function and it's instrumented, so we crash
> when KASAN tries to access shadow in sort().
> 
> [+CC efi some guys]
> 
> Comment in drivers/firmware/efi/libstub/Makefile says that EFI stub
> executes with MMU disabled:
>     # The stub may be linked into the kernel proper or into a separate
> boot binary,
>     # but in either case, it executes before the kernel does (with MMU
> disabled) so
>     # things like ftrace and stack-protector are likely to cause trouble if left
>     # enabled, even if doing so doesn't break the build.
> 
> But in arch/arm64/kernel/efi-entry.S:
> * We arrive here from the EFI boot manager with:
> *
> *    * CPU in little-endian mode
> *    * MMU on with identity-mapped RAM
> 
> So is MMU enabled in ARM64 efi-stub?

The stub is executed as an EFI application, which means that the MMU is
on, and the page tables are an idmap owned by the EFI implementation.

> If yes, we could solve this issue by mapping KASAN early shadow in efi stub.

As the page tables are owned by the implemenation and not the kernel, we
cannot alter them (at least not until we've called ExitBootServices(),
which happens relatively late).

Can we not build the stub without ASAN protections?

Thanks,
Mark.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: [PATCH v6 0/6] KASAN for arm64 Catalin Marinas <catalin.marinas@arm.com> - 2015-10-07 12:10 +0200
  Re: [PATCH v6 0/6] KASAN for arm64 Andrey Ryabinin <ryabinin.a.a@gmail.com> - 2015-10-08 12:40 +0200
    Re: [PATCH v6 0/6] KASAN for arm64 Mark Rutland <mark.rutland@arm.com> - 2015-10-08 13:10 +0200
    Re: [PATCH v6 0/6] KASAN for arm64 Mark Rutland <mark.rutland@arm.com> - 2015-10-08 13:20 +0200
      Re: [PATCH v6 0/6] KASAN for arm64 Andrey Ryabinin <ryabinin.a.a@gmail.com> - 2015-10-08 13:30 +0200
        Re: [PATCH v6 0/6] KASAN for arm64 Ard Biesheuvel <ard.biesheuvel@linaro.org> - 2015-10-08 14:10 +0200
          Re: [PATCH v6 0/6] KASAN for arm64 Catalin Marinas <catalin.marinas@arm.com> - 2015-10-08 17:20 +0200
            Re: [PATCH v6 0/6] KASAN for arm64 Andrey Ryabinin <ryabinin.a.a@gmail.com> - 2015-10-08 18:10 +0200
              Re: [PATCH v6 0/6] KASAN for arm64 Andrey Ryabinin <ryabinin.a.a@gmail.com> - 2015-10-09 11:40 +0200
                Re: [PATCH v6 0/6] KASAN for arm64 Mark Rutland <mark.rutland@arm.com> - 2015-10-09 11:50 +0200
                Re: [PATCH v6 0/6] KASAN for arm64 Andrey Ryabinin <ryabinin.a.a@gmail.com> - 2015-10-09 12:20 +0200
                Re: [PATCH v6 0/6] KASAN for arm64 Mark Rutland <mark.rutland@arm.com> - 2015-10-09 14:50 +0200
                Re: [PATCH v6 0/6] KASAN for arm64 Andrey Ryabinin <ryabinin.a.a@gmail.com> - 2015-10-09 16:40 +0200
            Re: [PATCH v6 0/6] KASAN for arm64 Ard Biesheuvel <ard.biesheuvel@linaro.org> - 2015-10-08 18:10 +0200

csiph-web