Re: [PATCH 00/15] kasan: x86: arm64: risc-v: KASAN tag-based mode for x86

From: Dave Hansen <dave.hansen@intel.com>
To: "Christoph Lameter (Ampere)" <cl@gentwo.org>,
	Jessica Clarke <jrtc27@jrtc27.com>
Cc: Maciej Wieczor-Retman <maciej.wieczor-retman@intel.com>,
	luto@kernel.org, xin@zytor.com, kirill.shutemov@linux.intel.com,
	palmer@dabbelt.com, tj@kernel.org, andreyknvl@gmail.com,
	brgerst@gmail.com, ardb@kernel.org, dave.hansen@linux.intel.com,
	jgross@suse.com, will@kernel.org, akpm@linux-foundation.org,
	arnd@arndb.de, corbet@lwn.net, dvyukov@google.com,
	richard.weiyang@gmail.com, ytcoode@gmail.com, tglx@linutronix.de,
	hpa@zytor.com, seanjc@google.com, paul.walmsley@sifive.com,
	aou@eecs.berkeley.edu, justinstitt@google.com,
	jason.andryuk@amd.com, glider@google.com, ubizjak@gmail.com,
	jannh@google.com, bhe@redhat.com, vincenzo.frascino@arm.com,
	rafael.j.wysocki@intel.com, ndesaulniers@google.com,
	mingo@redhat.com, catalin.marinas@arm.com,
	junichi.nomura@nec.com, nathan@kernel.org,
	ryabinin.a.a@gmail.com, dennis@kernel.org, bp@alien8.de,
	kevinloughlin@google.com, morbo@google.com,
	dan.j.williams@intel.com, julian.stecklina@cyberus-technology.de,
	peterz@infradead.org, kees@kernel.org,
	kasan-dev@googlegroups.com, x86@kernel.org,
	linux-arm-kernel@lists.infradead.org,
	linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org,
	linux-mm@kvack.org, llvm@lists.linux.dev,
	linux-doc@vger.kernel.org, "Shutemov,
	Kirill" <kirill.shutemov@intel.com>
Subject: Re: [PATCH 00/15] kasan: x86: arm64: risc-v: KASAN tag-based mode for x86
Date: Thu, 6 Feb 2025 13:41:29 -0800	[thread overview]
Message-ID: <239de2b9-0787-4105-a481-418dbd4d861e@intel.com> (raw)
In-Reply-To: <94f81328-a135-b99b-7f73-43fb77bd7292@gentwo.org>

On 2/6/25 11:11, Christoph Lameter (Ampere) wrote:
> I also see that KASAN_HW_TAGS exist but this means that the tags can only
> be used with CONFIG_KASAN which is a kernel configuration for debug
> purposes.
> 
> What we are interested in is a *production* implementation with minimal
> software overhead that will be the default on ARM64 if the appropriate
> hardware is detected. 

Ahh, interesting. I'd assumed that once folks had in-hardware tag checks
that they'd just turn on CONFIG_KASAN and be happy.  Guess not!

> That in turn will hopefully allow other software instrumentation
> that is currently used to keep small objects secure and in turn
> creates overhead.
OK, so KASAN as-is is too broad. Are you saying that the kernel
_currently_ have "software instrumentation" like SLAB
redzoning/poisoning and you'd like to see MTE used to replace those?

Are you just interested in small objects?  What counts as small?  I
assume it's anything roughly <PAGE_SIZE.