From: Greg KH <greg@kroah.com>
To: Kees Cook <kees@kernel.org>
Cc: Miguel Ojeda <ojeda@kernel.org>,
Alexander Viro <viro@zeniv.linux.org.uk>,
Christian Brauner <brauner@kernel.org>, Jan Kara <jack@suse.cz>,
Nathan Chancellor <nathan@kernel.org>,
Nick Desaulniers <ndesaulniers@google.com>,
Bill Wendling <morbo@google.com>,
Justin Stitt <justinstitt@google.com>,
linux-fsdevel@vger.kernel.org, llvm@lists.linux.dev,
linux-kernel@vger.kernel.org, linux-hardening@vger.kernel.org
Subject: Re: [PATCH 2/2] seq_file: Require explicit initialization of struct seq_operations
Date: Thu, 15 Oct 2026 07:21:28 +0200 [thread overview]
Message-ID: <2026101517-profane-opponent-4523@gregkh> (raw)
In-Reply-To: <20261014225818.3457479-2-kees@kernel.org>
On Wed, Oct 14, 2026 at 03:58:16PM -0700, Kees Cook wrote:
> In the very unlikely chance that a seq_operations didn't get initialized,
> we wouldn't want them calling some random location. As a first example
> user of __require_explicit_initialization, annotate them so a missing
> initializer is a compile-time warning.
>
> Every seq_operations in the tree already sets all four, so no new warnings
> are added.
>
> Signed-off-by: Kees Cook <kees@kernel.org>
> ---
> include/linux/seq_file.h | 13 +++++++++----
> 1 file changed, 9 insertions(+), 4 deletions(-)
>
> diff --git a/include/linux/seq_file.h b/include/linux/seq_file.h
> index dc0e8c62d9e0..f0e7e52a0905 100644
> --- a/include/linux/seq_file.h
> +++ b/include/linux/seq_file.h
> @@ -28,11 +28,16 @@ struct seq_file {
> void *private;
> };
>
> +/* All four are called without checking for NULL. */
> struct seq_operations {
> - void * (*start) (struct seq_file *m, loff_t *pos);
> - void (*stop) (struct seq_file *m, void *v);
> - void * (*next) (struct seq_file *m, void *v, loff_t *pos);
> - int (*show) (struct seq_file *m, void *v);
> + void *(*start)(struct seq_file *m, loff_t *pos)
> + __require_explicit_initialization;
> + void (*stop)(struct seq_file *m, void *v)
> + __require_explicit_initialization;
> + void *(*next)(struct seq_file *m, void *v, loff_t *pos)
> + __require_explicit_initialization;
> + int (*show)(struct seq_file *m, void *v)
> + __require_explicit_initialization;
> };
Hm, I acked the first patch, but seeing this "in the wild" is
interesting. Feels kind of ackward, but I don't really know what to
suggest instead? What about just making the lines longer:
void *(*start)(struct seq_file *m, loff_t *pos) __require_explicit_initialization;
void (*stop)(struct seq_file *m, void *v) __require_explicit_initialization;
void *(*next)(struct seq_file *m, void *v, loff_t *pos) __require_explicit_initialization;
int (*show)(struct seq_file *m, void *v) __require_explicit_initialization;
?
Anyway, I don't know. I like this feature, and maybe it's going to be
used so infrequently it's not a big deal, but feels clunky.
thanks,
greg k-h
next prev parent reply other threads:[~2026-10-15 5:21 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-14 22:58 [PATCH 0/2] Add __require_explicit_initialization and its first user Kees Cook
2026-10-14 22:58 ` [PATCH 1/2] Compiler Attributes: Add __require_explicit_initialization macro Kees Cook
2026-10-14 23:44 ` Nathan Chancellor
2026-10-15 5:18 ` Greg Kroah-Hartman
2026-10-14 22:58 ` [PATCH 2/2] seq_file: Require explicit initialization of struct seq_operations Kees Cook
2026-10-15 5:21 ` Greg KH [this message]
2026-10-15 5:46 ` Miguel Ojeda
2026-10-15 5:57 ` Kees Cook
2026-10-15 7:11 ` Greg KH
2026-10-15 7:47 ` Miguel Ojeda
2026-10-15 8:47 ` Greg KH
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026101517-profane-opponent-4523@gregkh \
--to=greg@kroah.com \
--cc=brauner@kernel.org \
--cc=jack@suse.cz \
--cc=justinstitt@google.com \
--cc=kees@kernel.org \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-hardening@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=llvm@lists.linux.dev \
--cc=morbo@google.com \
--cc=nathan@kernel.org \
--cc=ndesaulniers@google.com \
--cc=ojeda@kernel.org \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.