From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.5 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_PASS, USER_AGENT_MUTT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 17C55C10F00 for ; Mon, 25 Feb 2019 13:21:18 +0000 (UTC) Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id D9BB920663 for ; Mon, 25 Feb 2019 13:21:17 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="bSbE1Np9" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org D9BB920663 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+infradead-linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20170209; h=Sender: Content-Transfer-Encoding:Content-Type:Cc:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References: Message-ID:Subject:To:From:Date:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=fG7vrG6GxbLucZKXFhUhtQ4k9ECDCUtMU7ZF8aW6hzg=; b=bSbE1Np9hUI6dU dyXiAZFIi2kRWd7qkL2uOzS4OA3ROM37e1qN4Xpsref+R5yXQVAPAL1ykUWujcg2llItj9lHlh1LJ wA0zmz3nLkhJ5Mf58yGAmUIHMxtOi74ixgTKlA+VjOYL9sJk+7kgILXqOfYpLp9qQkItu+/mQMZCZ 5EQ76tfLpkmMC0DnZ+zvWYWGppcNdZCVmBB4+XvjVnGgBr8z9xPb+04gUw4rnLcYsHbvpvi0oqT9O F1NVtgcigNmbPoyMVMAmJdmR1tIbyyBRv8wq285VRMdnAgCYI8pSwKIBjXmQ2EgqXgz92+1Wl3lSa lRqdjpvUto9RZSPhVDog==; Received: from localhost ([127.0.0.1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.90_1 #2 (Red Hat Linux)) id 1gyGBx-0001x8-3u; Mon, 25 Feb 2019 13:21:09 +0000 Received: from j217100.upc-j.chello.nl ([24.132.217.100] helo=hirez.programming.kicks-ass.net) by bombadil.infradead.org with esmtpsa (Exim 4.90_1 #2 (Red Hat Linux)) id 1gyGBu-0001wS-DG; Mon, 25 Feb 2019 13:21:06 +0000 Received: by hirez.programming.kicks-ass.net (Postfix, from userid 1000) id A112F236F9A0D; Mon, 25 Feb 2019 14:21:03 +0100 (CET) Date: Mon, 25 Feb 2019 14:21:03 +0100 From: Peter Zijlstra To: hpa@zytor.com Subject: Re: [RFC][PATCH] objtool: STAC/CLAC validation Message-ID: <20190225132103.GD32494@hirez.programming.kicks-ass.net> References: <20190219124808.GG8501@fuggles.cambridge.arm.com> <20190222222635.GK14054@worktop.programming.kicks-ass.net> <20190223083942.GF32477@hirez.programming.kicks-ass.net> <15DE0017-9AE5-4E7A-96CD-E5E9F5B72516@zytor.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <15DE0017-9AE5-4E7A-96CD-E5E9F5B72516@zytor.com> User-Agent: Mutt/1.10.1 (2018-07-13) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Denys Vlasenko , Josh Poimboeuf , Julien Thierry , Catalin Marinas , valentin.schneider@arm.com, Will Deacon , Linux List Kernel Mailing , Andy Lutomirski , Ingo Molnar , James Morse , Andrew Lutomirski , Brian Gerst , Borislav Petkov , Thomas Gleixner , Linus Torvalds , Ingo Molnar , "linux-alpha@vger.kernel.org" Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+infradead-linux-arm-kernel=archiver.kernel.org@lists.infradead.org T24gTW9uLCBGZWIgMjUsIDIwMTkgYXQgMTI6NDc6MDBBTSAtMDgwMCwgaHBhQHp5dG9yLmNvbSB3 cm90ZToKPiBJdCBkb2Vzbid0IGhhdmUgdG8gdW5kZXJzdGFuZCB0aGUgY29udGVudHMgb2YgdGhl IG1lbW9wLCBidXQgaXQgc2VlbXMKPiB0aGF0IHRoZSBwcmVzZW5jZSBvZiBhIG1vZHJtIHdpdGgg bW9kZSDiiaAgMyBzaG91bGQgYmUgcGxlbnR5LiBJdCBuZWVkcwo+IHRvIGtub3cgdGhhdCBtdWNo IGluIG9yZGVyIHRvIGtub3cgdGhlIGxlbmd0aCBvZiBpbnN0cnVjdGlvbnMgYW55d2F5Lgo+IEZv ciBleHRyYSBjcmVkaXQsIGlnbm9yZSBMRUEgb3IgaGludGluZyBpbnN0cnVjdGlvbnMuCgpBIGxp dHRsZSBzb21ldGhpbmcgbGlrZSBzbyB0aGVuPwoKYXJjaC94ODYva2VybmVsL2ZwdS9zaWduYWwu bzogd2FybmluZzogb2JqdG9vbDogLmFsdGluc3RyX3JlcGxhY2VtZW50KzB4OWM6IFVBQ0NFU1Mg ZGlzYWJsZSB3aXRob3V0IE1FTU9QczogY29weV9mcHN0YXRlX3RvX3NpZ2ZyYW1lKCkKCjAwMDAw MDAwMDIzYyAgMDAwMjAwMDAwMDAyIFJfWDg2XzY0X1BDMzIgICAgIDAwMDAwMDAwMDAwMDAwMDAg LnRleHQgKyA2MDQKMDAwMDAwMDAwMjQwICAwMDA3MDAwMDAwMDIgUl9YODZfNjRfUEMzMiAgICAg MDAwMDAwMDAwMDAwMDAwMCAuYWx0aW5zdHJfcmVwbGFjZW1lbnQgKyA5OQowMDAwMDAwMDAyNDkg IDAwMDIwMDAwMDAwMiBSX1g4Nl82NF9QQzMyICAgICAwMDAwMDAwMDAwMDAwMDAwIC50ZXh0ICsg NjEwCjAwMDAwMDAwMDI0ZCAgMDAwNzAwMDAwMDAyIFJfWDg2XzY0X1BDMzIgICAgIDAwMDAwMDAw MDAwMDAwMDAgLmFsdGluc3RyX3JlcGxhY2VtZW50ICsgOWMKCi50ZXh0Cgo2MDQ6ICAgOTAgICAg ICAgICAgICAgICAgICAgICAgbm9wCjYwNTogICA5MCAgICAgICAgICAgICAgICAgICAgICBub3AK NjA2OiAgIDkwICAgICAgICAgICAgICAgICAgICAgIG5vcAo2MDc6ICAgODMgY2UgMDMgICAgICAg ICAgICAgICAgb3IgICAgICQweDMsJWVzaQo2MGE6ICAgODkgYjMgMDAgMDIgMDAgMDAgICAgICAg bW92ICAgICVlc2ksMHgyMDAoJXJieCkKNjEwOiAgIDkwICAgICAgICAgICAgICAgICAgICAgIG5v cAo2MTE6ICAgOTAgICAgICAgICAgICAgICAgICAgICAgbm9wCjYxMjogICA5MCAgICAgICAgICAg ICAgICAgICAgICBub3AKCi5hbHRpbnN0cl9yZXBsYWNlbWVudAoKOTk6ICAgMGYgMDEgY2IgICAg ICAgICAgICAgICAgc3RhYwo5YzogICAwZiAwMSBjYSAgICAgICAgICAgICAgICBjbGFjCgpXaGlj aCBsb29rcyBsaWtlIHRoZSB0b29sIGZhaWxlZCB0byByZWNvZ25pc2UgdGhhdCBNT1YgYXMgYSBt ZW1vcC4KCgoKLS0tCi0tLSBhL3Rvb2xzL29ianRvb2wvYXJjaC5oCisrKyBiL3Rvb2xzL29ianRv b2wvYXJjaC5oCkBAIC0zNyw3ICszNyw4IEBACiAjZGVmaW5lIElOU05fQ0xBQwkJMTIKICNkZWZp bmUgSU5TTl9TVEQJCTEzCiAjZGVmaW5lIElOU05fQ0xECQkxNAotI2RlZmluZSBJTlNOX09USEVS CQkxNQorI2RlZmluZSBJTlNOX01FTU9QCQkxNQorI2RlZmluZSBJTlNOX09USEVSCQkxNgogI2Rl ZmluZSBJTlNOX0xBU1QJCUlOU05fT1RIRVIKIAogZW51bSBvcF9kZXN0X3R5cGUgewotLS0gYS90 b29scy9vYmp0b29sL2FyY2gveDg2L2RlY29kZS5jCisrKyBiL3Rvb2xzL29ianRvb2wvYXJjaC94 ODYvZGVjb2RlLmMKQEAgLTEyMyw2ICsxMjMsOSBAQCBpbnQgYXJjaF9kZWNvZGVfaW5zdHJ1Y3Rp b24oc3RydWN0IGVsZiAqCiAJCW1vZHJtX21vZCA9IFg4Nl9NT0RSTV9NT0QobW9kcm0pOwogCQlt b2RybV9yZWcgPSBYODZfTU9EUk1fUkVHKG1vZHJtKTsKIAkJbW9kcm1fcm0gPSBYODZfTU9EUk1f Uk0obW9kcm0pOworCisJCWlmIChtb2RybV9tb2QgIT0gMykKKwkJCSp0eXBlID0gSU5TTl9NRU1P UDsKIAl9CiAKIAlpZiAoaW5zbi5zaWIubmJ5dGVzKQotLS0gYS90b29scy9vYmp0b29sL2NoZWNr LmMKKysrIGIvdG9vbHMvb2JqdG9vbC9jaGVjay5jCkBAIC0yMDQ3LDYgKzIwNDcsNyBAQCBzdGF0 aWMgaW50IHZhbGlkYXRlX2JyYW5jaChzdHJ1Y3Qgb2JqdG9vCiAJCQkJV0FSTl9GVU5DKCJyZWN1 cnNpdmUgVUFDQ0VTUyBlbmFibGUiLCBzZWMsIGluc24tPm9mZnNldCk7CiAKIAkJCXN0YXRlLnVh Y2Nlc3MgPSB0cnVlOworCQkJc3RhdGUubWVtb3AgPSBmYWxzZTsKIAkJCWJyZWFrOwogCiAJCWNh c2UgSU5TTl9DTEFDOgpAQCAtMjA1OCw2ICsyMDU5LDkgQEAgc3RhdGljIGludCB2YWxpZGF0ZV9i cmFuY2goc3RydWN0IG9ianRvbwogCQkJCWJyZWFrOwogCQkJfQogCisJCQlpZiAoIXN0YXRlLm1l bW9wICYmIGluc24tPmZ1bmMpCisJCQkJV0FSTl9GVU5DKCJVQUNDRVNTIGRpc2FibGUgd2l0aG91 dCBNRU1PUHM6ICVzKCkiLCBzZWMsIGluc24tPm9mZnNldCwgaW5zbi0+ZnVuYy0+bmFtZSk7CisK IAkJCXN0YXRlLnVhY2Nlc3MgPSBmYWxzZTsKIAkJCWJyZWFrOwogCkBAIC0yMDc1LDYgKzIwNzks MTAgQEAgc3RhdGljIGludCB2YWxpZGF0ZV9icmFuY2goc3RydWN0IG9ianRvbwogCQkJc3RhdGUu ZGYgPSBmYWxzZTsKIAkJCWJyZWFrOwogCisJCWNhc2UgSU5TTl9NRU1PUDoKKwkJCXN0YXRlLm1l bW9wID0gdHJ1ZTsKKwkJCWJyZWFrOworCiAJCWRlZmF1bHQ6CiAJCQlicmVhazsKIAkJfQotLS0g YS90b29scy9vYmp0b29sL2NoZWNrLmgKKysrIGIvdG9vbHMvb2JqdG9vbC9jaGVjay5oCkBAIC0z MSw3ICszMSw3IEBAIHN0cnVjdCBpbnNuX3N0YXRlIHsKIAlpbnQgc3RhY2tfc2l6ZTsKIAl1bnNp Z25lZCBjaGFyIHR5cGU7CiAJYm9vbCBicF9zY3JhdGNoOwotCWJvb2wgZHJhcCwgZW5kLCB1YWNj ZXNzLCB1YWNjZXNzX3NhZmUsIGRmOworCWJvb2wgZHJhcCwgZW5kLCB1YWNjZXNzLCB1YWNjZXNz X3NhZmUsIGRmLCBtZW1vcDsKIAlpbnQgZHJhcF9yZWcsIGRyYXBfb2Zmc2V0OwogCXN0cnVjdCBj ZmlfcmVnIHZhbHNbQ0ZJX05VTV9SRUdTXTsKIH07CgpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwpsaW51eC1hcm0ta2VybmVsIG1haWxpbmcgbGlzdApsaW51 eC1hcm0ta2VybmVsQGxpc3RzLmluZnJhZGVhZC5vcmcKaHR0cDovL2xpc3RzLmluZnJhZGVhZC5v cmcvbWFpbG1hbi9saXN0aW5mby9saW51eC1hcm0ta2VybmVsCg== From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.3 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_PASS,USER_AGENT_MUTT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 38E6CC43381 for ; Mon, 25 Feb 2019 13:21:17 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 0646D20663 for ; Mon, 25 Feb 2019 13:21:17 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="qFHtWjQr" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727254AbfBYNVP (ORCPT ); Mon, 25 Feb 2019 08:21:15 -0500 Received: from bombadil.infradead.org ([198.137.202.133]:34782 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726921AbfBYNVP (ORCPT ); Mon, 25 Feb 2019 08:21:15 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20170209; h=In-Reply-To:Content-Transfer-Encoding :Content-Type:MIME-Version:References:Message-ID:Subject:Cc:To:From:Date: Sender:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=LSaiudI9zMFRYwqyfTbYs2Hi81Jc0hIhsm+H3pY+7wo=; b=qFHtWjQrZ76I+mb73nV4DaXMpe kpqeHQf6WNXzN2/D1mA6BLaQzvP/e2uZ+fbDeN+He7i5N+ayTQVFjmN5CGFXoWWFmwBWyJ8Ig5d95 qYbKp7Sgzr8LXwo0M8aiex4QNZBCxk3CWk8LL3TMlZ4UqbCx8VdcuTmd/xuRATr7Hr6dqZo2BhJ9x I+23UHAH8kBh247CUF2iLwjSPpnvj7EENTmjstQNTuvRWqQus2CiRNHiFveummIQy7h3AboXBfB5+ de8HsdoictYy/xzC6uZExvp1scl74cemdd2JJbTbAK0/U/+PP+wtNFLxT12AxaBp7n9oJyJpnKeQ8 kYItUXWA==; Received: from j217100.upc-j.chello.nl ([24.132.217.100] helo=hirez.programming.kicks-ass.net) by bombadil.infradead.org with esmtpsa (Exim 4.90_1 #2 (Red Hat Linux)) id 1gyGBu-0001wS-DG; Mon, 25 Feb 2019 13:21:06 +0000 Received: by hirez.programming.kicks-ass.net (Postfix, from userid 1000) id A112F236F9A0D; Mon, 25 Feb 2019 14:21:03 +0100 (CET) Date: Mon, 25 Feb 2019 14:21:03 +0100 From: Peter Zijlstra To: hpa@zytor.com Cc: Thomas Gleixner , Linus Torvalds , Julien Thierry , Will Deacon , Andy Lutomirski , Ingo Molnar , Linux List Kernel Mailing , "linux-alpha@vger.kernel.org" , Ingo Molnar , Catalin Marinas , James Morse , valentin.schneider@arm.com, Brian Gerst , Josh Poimboeuf , Andrew Lutomirski , Borislav Petkov , Denys Vlasenko Subject: Re: [RFC][PATCH] objtool: STAC/CLAC validation Message-ID: <20190225132103.GD32494@hirez.programming.kicks-ass.net> References: <20190219124808.GG8501@fuggles.cambridge.arm.com> <20190222222635.GK14054@worktop.programming.kicks-ass.net> <20190223083942.GF32477@hirez.programming.kicks-ass.net> <15DE0017-9AE5-4E7A-96CD-E5E9F5B72516@zytor.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <15DE0017-9AE5-4E7A-96CD-E5E9F5B72516@zytor.com> User-Agent: Mutt/1.10.1 (2018-07-13) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Feb 25, 2019 at 12:47:00AM -0800, hpa@zytor.com wrote: > It doesn't have to understand the contents of the memop, but it seems > that the presence of a modrm with mode ≠ 3 should be plenty. It needs > to know that much in order to know the length of instructions anyway. > For extra credit, ignore LEA or hinting instructions. A little something like so then? arch/x86/kernel/fpu/signal.o: warning: objtool: .altinstr_replacement+0x9c: UACCESS disable without MEMOPs: copy_fpstate_to_sigframe() 00000000023c 000200000002 R_X86_64_PC32 0000000000000000 .text + 604 000000000240 000700000002 R_X86_64_PC32 0000000000000000 .altinstr_replacement + 99 000000000249 000200000002 R_X86_64_PC32 0000000000000000 .text + 610 00000000024d 000700000002 R_X86_64_PC32 0000000000000000 .altinstr_replacement + 9c .text 604: 90 nop 605: 90 nop 606: 90 nop 607: 83 ce 03 or $0x3,%esi 60a: 89 b3 00 02 00 00 mov %esi,0x200(%rbx) 610: 90 nop 611: 90 nop 612: 90 nop .altinstr_replacement 99: 0f 01 cb stac 9c: 0f 01 ca clac Which looks like the tool failed to recognise that MOV as a memop. --- --- a/tools/objtool/arch.h +++ b/tools/objtool/arch.h @@ -37,7 +37,8 @@ #define INSN_CLAC 12 #define INSN_STD 13 #define INSN_CLD 14 -#define INSN_OTHER 15 +#define INSN_MEMOP 15 +#define INSN_OTHER 16 #define INSN_LAST INSN_OTHER enum op_dest_type { --- a/tools/objtool/arch/x86/decode.c +++ b/tools/objtool/arch/x86/decode.c @@ -123,6 +123,9 @@ int arch_decode_instruction(struct elf * modrm_mod = X86_MODRM_MOD(modrm); modrm_reg = X86_MODRM_REG(modrm); modrm_rm = X86_MODRM_RM(modrm); + + if (modrm_mod != 3) + *type = INSN_MEMOP; } if (insn.sib.nbytes) --- a/tools/objtool/check.c +++ b/tools/objtool/check.c @@ -2047,6 +2047,7 @@ static int validate_branch(struct objtoo WARN_FUNC("recursive UACCESS enable", sec, insn->offset); state.uaccess = true; + state.memop = false; break; case INSN_CLAC: @@ -2058,6 +2059,9 @@ static int validate_branch(struct objtoo break; } + if (!state.memop && insn->func) + WARN_FUNC("UACCESS disable without MEMOPs: %s()", sec, insn->offset, insn->func->name); + state.uaccess = false; break; @@ -2075,6 +2079,10 @@ static int validate_branch(struct objtoo state.df = false; break; + case INSN_MEMOP: + state.memop = true; + break; + default: break; } --- a/tools/objtool/check.h +++ b/tools/objtool/check.h @@ -31,7 +31,7 @@ struct insn_state { int stack_size; unsigned char type; bool bp_scratch; - bool drap, end, uaccess, uaccess_safe, df; + bool drap, end, uaccess, uaccess_safe, df, memop; int drap_reg, drap_offset; struct cfi_reg vals[CFI_NUM_REGS]; };