Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1395673
| From | tip-bot for Kees Cook <tipbot@zytor.com> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | [tip:x86/boot] x86/boot: Clean up pointer casting |
| Date | 2016-05-06 09:50 +0200 |
| Message-ID | <rvIGm-ZB-7@gated-at.bofh.it> (permalink) |
| References | <rvzML-gY-41@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Commit-ID: 2bc1cd39fa9f659956b25e500422e700a6cd4ec3
Gitweb: http://git.kernel.org/tip/2bc1cd39fa9f659956b25e500422e700a6cd4ec3
Author: Kees Cook <keescook@chromium.org>
AuthorDate: Thu, 5 May 2016 15:13:46 -0700
Committer: Ingo Molnar <mingo@kernel.org>
CommitDate: Fri, 6 May 2016 09:00:59 +0200
x86/boot: Clean up pointer casting
Currently extract_kernel() defines the input and output buffer pointers
as "unsigned char *" since that's effectively what they are. It passes
these to the decompressor routine and to the ELF parser, which both
logically deal with buffer pointers too. There is some casting ("unsigned
long") done to validate the numerical value of the pointers, but it is
relatively limited.
However, choose_random_location() operates almost exclusively on the
numerical representation of these pointers, so it ended up carrying
a lot of "unsigned long" casts. With the future physical/virtual split
these casts were going to multiply, so this attempts to solve the
problem by doing all the casting in choose_random_location()'s entry
and return instead of through-out the code. Adjusts argument names to
be more meaningful, and changes one us of "choice" to "output" to make
the future physical/virtual split more clear (i.e. "choice" should be
strictly a function return value and not used as an intermediate).
Suggested-by: Ingo Molnar <mingo@kernel.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Baoquan He <bhe@redhat.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Brian Gerst <brgerst@gmail.com>
Cc: Dave Young <dyoung@redhat.com>
Cc: Denys Vlasenko <dvlasenk@redhat.com>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Vivek Goyal <vgoyal@redhat.com>
Cc: Yinghai Lu <yinghai@kernel.org>
Cc: kernel-hardening@lists.openwall.com
Cc: lasse.collin@tukaani.org
Link: http://lkml.kernel.org/r/1462486436-3707-2-git-send-email-keescook@chromium.org
Signed-off-by: Ingo Molnar <mingo@kernel.org>
---
arch/x86/boot/compressed/kaslr.c | 20 ++++++++++++++------
arch/x86/boot/compressed/misc.h | 10 +++++-----
2 files changed, 19 insertions(+), 11 deletions(-)
diff --git a/arch/x86/boot/compressed/kaslr.c b/arch/x86/boot/compressed/kaslr.c
index f1818d9..2072d82 100644
--- a/arch/x86/boot/compressed/kaslr.c
+++ b/arch/x86/boot/compressed/kaslr.c
@@ -305,12 +305,21 @@ static unsigned long find_random_addr(unsigned long minimum,
return slots_fetch_random();
}
-unsigned char *choose_random_location(unsigned char *input,
+unsigned char *choose_random_location(unsigned char *input_ptr,
unsigned long input_size,
- unsigned char *output,
+ unsigned char *output_ptr,
unsigned long output_size)
{
- unsigned long choice = (unsigned long)output;
+ /*
+ * The caller of choose_random_location() uses unsigned char * for
+ * buffer pointers since it performs decompression, elf parsing, etc.
+ * Since this code examines addresses much more numerically,
+ * unsigned long is used internally here. Instead of sprinkling
+ * more casts into extract_kernel, do them here and at return.
+ */
+ unsigned long input = (unsigned long)input_ptr;
+ unsigned long output = (unsigned long)output_ptr;
+ unsigned long choice = output;
unsigned long random_addr;
#ifdef CONFIG_HIBERNATION
@@ -328,11 +337,10 @@ unsigned char *choose_random_location(unsigned char *input,
boot_params->hdr.loadflags |= KASLR_FLAG;
/* Record the various known unsafe memory ranges. */
- mem_avoid_init((unsigned long)input, input_size,
- (unsigned long)output, output_size);
+ mem_avoid_init(input, input_size, output, output_size);
/* Walk e820 and find a random address. */
- random_addr = find_random_addr(choice, output_size);
+ random_addr = find_random_addr(output, output_size);
if (!random_addr) {
warn("KASLR disabled: could not find suitable E820 region!");
goto out;
diff --git a/arch/x86/boot/compressed/misc.h b/arch/x86/boot/compressed/misc.h
index 9887e0d..1f23d02 100644
--- a/arch/x86/boot/compressed/misc.h
+++ b/arch/x86/boot/compressed/misc.h
@@ -67,20 +67,20 @@ int cmdline_find_option_bool(const char *option);
#if CONFIG_RANDOMIZE_BASE
/* kaslr.c */
-unsigned char *choose_random_location(unsigned char *input,
+unsigned char *choose_random_location(unsigned char *input_ptr,
unsigned long input_size,
- unsigned char *output,
+ unsigned char *output_ptr,
unsigned long output_size);
/* cpuflags.c */
bool has_cpuflag(int flag);
#else
static inline
-unsigned char *choose_random_location(unsigned char *input,
+unsigned char *choose_random_location(unsigned char *input_ptr,
unsigned long input_size,
- unsigned char *output,
+ unsigned char *output_ptr,
unsigned long output_size)
{
- return output;
+ return output_ptr;
}
#endif
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[PATCH v6 0/11] x86/KASLR: Randomize virtual address separately Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
[PATCH v6 04/11] x86/KASLR: Build identity mappings on demand Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
Re: [PATCH v6 04/11] x86/KASLR: Build identity mappings on demand Ingo Molnar <mingo@kernel.org> - 2016-05-06 09:10 +0200
Re: [PATCH v6 04/11] x86/KASLR: Build identity mappings on demand Kees Cook <keescook@chromium.org> - 2016-05-06 19:50 +0200
[PATCH v6 05/11] x86/KASLR: Add slot_area to manage random_addr slots Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
[PATCH v6 02/11] x86/KASLR: Consolidate mem_avoid entries Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
[tip:x86/boot] x86/KASLR: Consolidate mem_avoid[] entries tip-bot for Yinghai Lu <tipbot@zytor.com> - 2016-05-06 09:50 +0200
Re: [tip:x86/boot] x86/KASLR: Consolidate mem_avoid[] entries Borislav Petkov <bp@alien8.de> - 2016-05-06 18:10 +0200
Re: [tip:x86/boot] x86/KASLR: Consolidate mem_avoid[] entries Kees Cook <keescook@chromium.org> - 2016-05-06 20:20 +0200
Re: [tip:x86/boot] x86/KASLR: Consolidate mem_avoid[] entries Borislav Petkov <bp@alien8.de> - 2016-05-06 21:40 +0200
[PATCH v6 10/11] x86/KASLR: Add physical address randomization >4G Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
Re: [PATCH v6 10/11] x86/KASLR: Add physical address randomization >4G Baoquan He <bhe@redhat.com> - 2016-05-06 10:30 +0200
Re: [PATCH v6 10/11] x86/KASLR: Add physical address randomization >4G Kees Cook <keescook@chromium.org> - 2016-05-06 17:40 +0200
Re: [PATCH v6 10/11] x86/KASLR: Add physical address randomization >4G Baoquan He <bhe@redhat.com> - 2016-05-08 11:20 +0200
[PATCH v6 06/11] x86/KASLR: Return earliest overlap when avoiding regions Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
[PATCH v6 01/11] x86/boot: Clean up pointer casting Kees Cook <keescook@chromium.org> - 2016-05-06 00:20 +0200
[tip:x86/boot] x86/boot: Clean up pointer casting tip-bot for Kees Cook <tipbot@zytor.com> - 2016-05-06 09:50 +0200
Re: [tip:x86/boot] x86/boot: Clean up pointer casting Borislav Petkov <bp@alien8.de> - 2016-05-06 11:00 +0200
Re: [tip:x86/boot] x86/boot: Clean up pointer casting Ingo Molnar <mingo@kernel.org> - 2016-05-06 12:20 +0200
Re: [tip:x86/boot] x86/boot: Clean up pointer casting Kees Cook <keescook@chromium.org> - 2016-05-06 17:30 +0200
Re: [tip:x86/boot] x86/boot: Clean up pointer casting Ingo Molnar <mingo@kernel.org> - 2016-05-06 12:40 +0200
Re: [tip:x86/boot] x86/boot: Clean up pointer casting Borislav Petkov <bp@alien8.de> - 2016-05-06 12:50 +0200
[PATCH -v1.1] x86/boot: Simplify pointer casting in choose_random_location() Borislav Petkov <bp@alien8.de> - 2016-05-06 14:00 +0200
[tip:x86/boot] x86/boot: Simplify pointer casting in choose_random_location() tip-bot for Borislav Petkov <tipbot@zytor.com> - 2016-05-07 08:40 +0200
csiph-web