All of lore.kernel.org
 help / color / mirror / Atom feed
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: "Gustavo A. R. Silva" <gustavoars@kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	dm-devel@redhat.com, linux-m68k <linux-m68k@lists.linux-m68k.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	linux-s390 <linux-s390@vger.kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	netdev <netdev@vger.kernel.org>, bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>,
	linux-can@vger.kernel.org,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	linux1394-devel@lists.sourceforge.net, io-uring@vger.kernel.org,
	lvs-devel@vger.kernel.org,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	nvdimm@lists.linux.dev,
	NetFilter <netfilter-devel@vger.kernel.org>,
	coreteam@netfilter.org, linux-perf-users@vger.kernel.org,
	linux-raid@vger.kernel.org, linux-sctp@vger.kernel.org,
	linux-stm32@st-md-mailman.stormreply.com,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	scsi <linux-scsi@vger.kernel.org>,
	target-devel <target-devel@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	virtualization@lists.linux-foundation.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	linux-hardening@vger.kernel.org
Subject: Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: nvdimm@lists.linux.dev,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	"Gustavo A. R. Silva" <gustavoars@kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	dm-devel@redhat.com, target-devel <target-devel@vger.kernel.org>,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	linux-hardening@vger.kernel.org,
	linux1394-devel@lists.sourceforge.net,
	linux-stm32@st-md-mailman.stormreply.com,
	linux-s390 <linux-s390@vger.kernel.org>,
	scsi <linux-scsi@vger.kernel.org>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	lvs-devel@vger.kernel.org, coreteam@netfilter.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	linux-can@vger.kernel.org, linux-raid@vger.kernel.org,
	linux-m68k <linux-m68k@lists.linux-m68k.org>,
	virtualization@lists.linux-foundation.org,
	io-uring@vger.kernel.org,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	netdev <netdev@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	linux-perf-users@vger.kernel.org, linux-sctp@vger.kernel.org,
	NetFilter <netfilter-devel@vger.kernel.org>,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>
Subject: Re: [dm-devel] [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

--
dm-devel mailing list
dm-devel@redhat.com
https://listman.redhat.com/mailman/listinfo/dm-devel

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: nvdimm@lists.linux.dev,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	"Gustavo A. R. Silva" <gustavoars@kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	dm-devel@redhat.com, target-devel <target-devel@vger.kernel.org>,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	linux-hardening@vger.kernel.org,
	linux1394-devel@lists.sourceforge.net,
	linux-stm32@st-md-mailman.stormreply.com,
	linux-s390 <linux-s390@vger.kernel.org>,
	scsi <linux-scsi@vger.kernel.org>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	lvs-devel@vger.kernel.org, coreteam@netfilter.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	linux-can@vger.kernel.org, linux-raid@vger.kernel.org,
	linux-m68k <linux-m68k@lists.linux-m68k.org>,
	virtualization@lists.linux-foundation.org,
	io-uring@vger.kernel.org,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	netdev <netdev@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	linux-perf-users@vger.kernel.org, linux-sctp@vger.kernel.org,
	NetFilter <netfilter-devel@vger.kernel.org>,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>
Subject: Re: [Intel-gfx] [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: "Gustavo A. R. Silva" <gustavoars@kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	dm-devel@redhat.com, linux-m68k <linux-m68k@lists.linux-m68k.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	linux-s390 <linux-s390@vger.kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	netdev <netdev@vger.kernel.org>, bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>,
	linux-can@vger.kernel.org,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	linux1394-devel@lists.sourceforge.net, io-uring@vger.kernel.org,
	lvs-devel@vger.kernel.org,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	nvdimm@lists.linux.dev,
	NetFilter <netfilter-devel@vger.kernel.org>,
	coreteam@netfilter.org, linux-perf-users@vger.kernel.org,
	linux-raid@vger.kernel.org, linux-sctp@vger.kernel.org,
	linux-stm32@st-md-mailman.stormreply.com,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	scsi <linux-scsi@vger.kernel.org>,
	target-devel <target-devel@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	virtualization@lists.linux-foundation.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	linux-hardening@vger.kernel.org
Subject: Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: "Gustavo A. R. Silva" <gustavoars@kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	dm-devel@redhat.com, linux-m68k <linux-m68k@lists.linux-m68k.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	linux-s390 <linux-s390@vger.kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	netdev <netdev@vger.kernel.org>, bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>,
	linux-can@vger.kernel.org,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	linux1394-devel@lists.sourceforge.net, io-uring@vger.kernel.org,
	lvs-devel@vger.kernel.org,
	MTD Maling List <linux-mtd@lists.infradea>
Subject: Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: nvdimm@lists.linux.dev,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	"Gustavo A. R. Silva" <gustavoars@kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	dm-devel@redhat.com, target-devel <target-devel@vger.kernel.org>,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	linux-hardening@vger.kernel.org,
	linux1394-devel@lists.sourceforge.net,
	linux-stm32@st-md-mailman.stormreply.com,
	linux-s390 <linux-s390@vger.kernel.org>,
	scsi <linux-scsi@vger.kernel.org>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	lvs-devel@vger.kernel.org, coreteam@netfilter.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	linux-can@vger.kernel.org, linux-raid@vger.kernel.org,
	linux-m68k <linux-m68k@lists.linux-m68k.org>,
	virtualization@lists.linux-foundation.org,
	io-uring@vger.kernel.org,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	netdev <netdev@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	linux-perf-users@vger.kernel.org, linux-sctp@vger.kernel.org,
	NetFilter <netfilter-devel@vger.kernel.org>,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>
Subject: Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook
_______________________________________________
Virtualization mailing list
Virtualization@lists.linux-foundation.org
https://lists.linuxfoundation.org/mailman/listinfo/virtualization

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: "Gustavo A. R. Silva" <gustavoars@kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	dm-devel@redhat.com, linux-m68k <linux-m68k@lists.linux-m68k.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	linux-s390 <linux-s390@vger.kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	netdev <netdev@vger.kernel.org>, bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>,
	linux-can@vger.kernel.org,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	linux1394-devel@lists.sourceforge.net, io-uring@vger.kernel.org,
	lvs-devel@vger.kernel.org,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	nvdimm@lists.linux.dev,
	NetFilter <netfilter-devel@vger.kernel.org>,
	coreteam@netfilter.org, linux-perf-users@vger.kernel.org,
	linux-raid@vger.kernel.org, linux-sctp@vger.kernel.org,
	linux-stm32@st-md-mailman.stormreply.com,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	scsi <linux-scsi@vger.kernel.org>,
	target-devel <target-devel@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	virtualization@lists.linux-foundation.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	linux-hardening@vger.kernel.org
Subject: Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

WARNING: multiple messages have this Message-ID (diff)
From: Kees Cook <keescook@chromium.org>
To: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: nvdimm@lists.linux.dev,
	ALSA Development Mailing List <alsa-devel@alsa-project.org>,
	"Gustavo A. R. Silva" <gustavoars@kernel.org>,
	KVM list <kvm@vger.kernel.org>,
	DRI Development <dri-devel@lists.freedesktop.org>,
	"open list:BROADCOM NVRAM DRIVER" <linux-mips@vger.kernel.org>,
	dm-devel@redhat.com, target-devel <target-devel@vger.kernel.org>,
	MTD Maling List <linux-mtd@lists.infradead.org>,
	linux-hardening@vger.kernel.org,
	linux1394-devel@lists.sourceforge.net,
	linux-stm32@st-md-mailman.stormreply.com,
	linux-s390 <linux-s390@vger.kernel.org>,
	scsi <linux-scsi@vger.kernel.org>,
	linux-rdma <linux-rdma@vger.kernel.org>,
	the arch/x86 maintainers <x86@kernel.org>,
	kasan-dev <kasan-dev@googlegroups.com>,
	lvs-devel@vger.kernel.org, coreteam@netfilter.org,
	V9FS Developers <v9fs-developer@lists.sourceforge.net>,
	Intel Graphics Development <intel-gfx@lists.freedesktop.org>,
	linux-can@vger.kernel.org, linux-raid@vger.kernel.org,
	linux-m68k <linux-m68k@lists.linux-m68k.org>,
	virtualization@lists.linux-foundation.org,
	io-uring@vger.kernel.org,
	Linux ARM <linux-arm-kernel@lists.infradead.org>,
	netdev <netdev@vger.kernel.org>,
	USB list <linux-usb@vger.kernel.org>,
	Linux MMC List <linux-mmc@vger.kernel.org>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	linux-perf-users@vger.kernel.org, linux-sctp@vger.kernel.org,
	NetFilter <netfilter-devel@vger.kernel.org>,
	Linux FS Devel <linux-fsdevel@vger.kernel.org>,
	bpf <bpf@vger.kernel.org>,
	linux-btrfs <linux-btrfs@vger.kernel.org>
Subject: Re: [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members
Date: Tue, 28 Jun 2022 11:05:53 -0700	[thread overview]
Message-ID: <202206281104.7CC3935@keescook> (raw)
In-Reply-To: <CAMuHMdU27TG_rpd=WTRPRcY22A4j4aN-6d_8OmK2aNpX06G3ig@mail.gmail.com>

On Tue, Jun 28, 2022 at 09:27:21AM +0200, Geert Uytterhoeven wrote:
> Hi Gustavo,
> 
> Thanks for your patch!
> 
> On Mon, Jun 27, 2022 at 8:04 PM Gustavo A. R. Silva
> <gustavoars@kernel.org> wrote:
> > There is a regular need in the kernel to provide a way to declare
> > having a dynamically sized set of trailing elements in a structure.
> > Kernel code should always use “flexible array members”[1] for these
> > cases. The older style of one-element or zero-length arrays should
> > no longer be used[2].
> 
> These rules apply to the kernel, but uapi is not considered part of the
> kernel, so different rules apply.  Uapi header files should work with
> whatever compiler that can be used for compiling userspace.

Right, userspace isn't bound by these rules, but the kernel ends up
consuming these structures, so we need to fix them. The [0] -> []
changes (when they are not erroneously being used within other
structures) is valid for all compilers. Flexible arrays are C99; it's
been 23 years. :)

But, yes, where we DO break stuff we need to workaround it, etc.

-- 
Kees Cook

  reply	other threads:[~2022-06-28 18:06 UTC|newest]

Thread overview: 117+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-06-27 18:04 [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members Gustavo A. R. Silva
2022-06-27 18:04 ` Gustavo A. R. Silva
2022-06-27 18:04 ` Gustavo A. R. Silva
2022-06-27 18:04 ` Gustavo A. R. Silva
2022-06-27 18:04 ` Gustavo A. R. Silva
2022-06-27 18:04 ` [dm-devel] " Gustavo A. R. Silva
2022-06-27 18:27 ` Daniel Borkmann
2022-06-27 18:27   ` Daniel Borkmann
2022-06-27 18:27   ` Daniel Borkmann
2022-06-27 18:27   ` Daniel Borkmann
2022-06-27 18:27   ` Daniel Borkmann
2022-06-27 18:27   ` Daniel Borkmann
2022-06-27 18:27   ` [Intel-gfx] " Daniel Borkmann
2022-06-27 18:27   ` [dm-devel] " Daniel Borkmann
2022-06-27 18:35   ` Gustavo A. R. Silva
2022-06-27 18:35     ` Gustavo A. R. Silva
2022-06-27 18:35     ` Gustavo A. R. Silva
2022-06-27 18:35     ` Gustavo A. R. Silva
2022-06-27 18:35     ` Gustavo A. R. Silva
2022-06-27 18:35     ` [dm-devel] " Gustavo A. R. Silva
2022-06-28  0:40   ` Jason Gunthorpe
2022-06-28  0:40     ` Jason Gunthorpe
2022-06-28  0:40     ` Jason Gunthorpe
2022-06-28  0:40     ` Jason Gunthorpe
2022-06-28  0:40     ` Jason Gunthorpe
2022-06-28  0:40     ` Jason Gunthorpe
2022-06-28  0:40     ` [dm-devel] " Jason Gunthorpe
2022-06-28  0:58     ` Gustavo A. R. Silva
2022-06-28  0:58       ` Gustavo A. R. Silva
2022-06-28  0:58       ` Gustavo A. R. Silva
2022-06-28  0:58       ` Gustavo A. R. Silva
2022-06-28  0:58       ` Gustavo A. R. Silva
2022-06-28  0:58       ` [dm-devel] " Gustavo A. R. Silva
2022-06-28  2:21       ` Gustavo A. R. Silva
2022-06-28  2:21         ` Gustavo A. R. Silva
2022-06-28  2:21         ` Gustavo A. R. Silva
2022-06-28  2:21         ` Gustavo A. R. Silva
2022-06-28  2:21         ` Gustavo A. R. Silva
2022-06-28  2:21         ` [dm-devel] " Gustavo A. R. Silva
2022-06-28 13:36         ` Jason Gunthorpe
2022-06-28 13:36           ` Jason Gunthorpe
2022-06-28 13:36           ` Jason Gunthorpe
2022-06-28 13:36           ` Jason Gunthorpe
2022-06-28 13:36           ` Jason Gunthorpe
2022-06-28 13:36           ` Jason Gunthorpe
2022-06-28 13:36           ` [dm-devel] " Jason Gunthorpe
2022-06-28 13:56           ` Gustavo A. R. Silva
2022-06-28 13:56             ` Gustavo A. R. Silva
2022-06-28 13:56             ` Gustavo A. R. Silva
2022-06-28 13:56             ` Gustavo A. R. Silva
2022-06-28 13:56             ` Gustavo A. R. Silva
2022-06-28 13:56             ` [dm-devel] " Gustavo A. R. Silva
2022-06-28 17:54     ` Kees Cook
2022-06-28 17:54       ` Kees Cook
2022-06-28 17:54       ` Kees Cook
2022-06-28 17:54       ` Kees Cook
2022-06-28 17:54       ` Kees Cook
2022-06-28 17:54       ` Kees Cook
2022-06-28 17:54       ` [Intel-gfx] " Kees Cook
2022-06-28 17:54       ` [dm-devel] " Kees Cook
2022-06-28 18:44       ` Jason Gunthorpe
2022-06-28 18:44         ` Jason Gunthorpe
2022-06-28 18:44         ` Jason Gunthorpe
2022-06-28 18:44         ` Jason Gunthorpe
2022-06-28 18:44         ` Jason Gunthorpe
2022-06-28 18:44         ` Jason Gunthorpe
2022-06-28 18:44         ` [dm-devel] " Jason Gunthorpe
2026-02-23 14:28       ` David Woodhouse
2026-02-23  3:38         ` Gustavo A. R. Silva
2026-02-23 19:57           ` David Woodhouse
2026-02-26 11:44           ` [PATCH] KVM: x86: Fix C++ user API for structures with variable length arrays David Woodhouse
2026-02-26 19:02             ` Kees Cook
2026-02-27  8:29               ` David Woodhouse
2026-02-28  0:43                 ` Kees Cook
2026-02-28  8:54                   ` David Woodhouse
2026-03-05 18:36             ` Sean Christopherson
2026-03-05 19:18               ` David Woodhouse
2026-03-05 19:31                 ` Sean Christopherson
2026-03-05 19:49                   ` [PATCH v2] KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs David Woodhouse
2026-04-03 15:13                     ` Sean Christopherson
2022-06-27 19:53 ` [PATCH][next] treewide: uapi: Replace zero-length arrays with flexible-array members Stephen Hemminger
2022-06-27 19:53   ` Stephen Hemminger
2022-06-27 19:53   ` Stephen Hemminger
2022-06-27 19:53   ` Stephen Hemminger
2022-06-27 19:53   ` Stephen Hemminger
2022-06-27 19:53   ` [Intel-gfx] " Stephen Hemminger
2022-06-27 19:53   ` [dm-devel] " Stephen Hemminger
2022-06-28 14:18   ` Gustavo A. R. Silva
2022-06-28 14:18     ` Gustavo A. R. Silva
2022-06-28 14:18     ` Gustavo A. R. Silva
2022-06-28 14:18     ` Gustavo A. R. Silva
2022-06-28 14:18     ` Gustavo A. R. Silva
2022-06-28 14:18     ` [dm-devel] " Gustavo A. R. Silva
2022-06-27 22:31 ` Dan Williams
2022-06-27 22:31   ` Dan Williams
2022-06-27 22:31   ` Dan Williams
2022-06-27 22:31   ` Dan Williams
2022-06-27 22:31   ` Dan Williams
2022-06-27 22:31   ` Dan Williams
2022-06-27 22:31   ` [Intel-gfx] " Dan Williams
2022-06-27 22:31   ` [dm-devel] " Dan Williams
2022-06-28  7:27 ` Geert Uytterhoeven
2022-06-28  7:27   ` Geert Uytterhoeven
2022-06-28  7:27   ` Geert Uytterhoeven
2022-06-28  7:27   ` Geert Uytterhoeven
2022-06-28  7:27   ` Geert Uytterhoeven
2022-06-28  7:27   ` Geert Uytterhoeven
2022-06-28  7:27   ` [Intel-gfx] " Geert Uytterhoeven
2022-06-28  7:27   ` [dm-devel] " Geert Uytterhoeven
2022-06-28 18:05   ` Kees Cook [this message]
2022-06-28 18:05     ` Kees Cook
2022-06-28 18:05     ` Kees Cook
2022-06-28 18:05     ` Kees Cook
2022-06-28 18:05     ` Kees Cook
2022-06-28 18:05     ` Kees Cook
2022-06-28 18:05     ` [Intel-gfx] " Kees Cook
2022-06-28 18:05     ` [dm-devel] " Kees Cook

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=202206281104.7CC3935@keescook \
    --to=keescook@chromium.org \
    --cc=alsa-devel@alsa-project.org \
    --cc=bpf@vger.kernel.org \
    --cc=coreteam@netfilter.org \
    --cc=dm-devel@redhat.com \
    --cc=dri-devel@lists.freedesktop.org \
    --cc=geert@linux-m68k.org \
    --cc=gustavoars@kernel.org \
    --cc=intel-gfx@lists.freedesktop.org \
    --cc=io-uring@vger.kernel.org \
    --cc=kasan-dev@googlegroups.com \
    --cc=kvm@vger.kernel.org \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=linux-btrfs@vger.kernel.org \
    --cc=linux-can@vger.kernel.org \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=linux-hardening@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-m68k@lists.linux-m68k.org \
    --cc=linux-mips@vger.kernel.org \
    --cc=linux-mmc@vger.kernel.org \
    --cc=linux-mtd@lists.infradead.org \
    --cc=linux-perf-users@vger.kernel.org \
    --cc=linux-raid@vger.kernel.org \
    --cc=linux-rdma@vger.kernel.org \
    --cc=linux-s390@vger.kernel.org \
    --cc=linux-scsi@vger.kernel.org \
    --cc=linux-sctp@vger.kernel.org \
    --cc=linux-stm32@st-md-mailman.stormreply.com \
    --cc=linux-usb@vger.kernel.org \
    --cc=linux1394-devel@lists.sourceforge.net \
    --cc=lvs-devel@vger.kernel.org \
    --cc=netdev@vger.kernel.org \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=nvdimm@lists.linux.dev \
    --cc=target-devel@vger.kernel.org \
    --cc=v9fs-developer@lists.sourceforge.net \
    --cc=virtualization@lists.linux-foundation.org \
    --cc=x86@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.