BPF List
 help / color / mirror / Atom feed
From: david.keisarschm@mail.huji.ac.il
To: unlisted-recipients:; (no To-header on input)
Cc: David <david.keisarschm@mail.huji.ac.il>,
	aksecurity@gmail.com, ilay.bahat1@gmail.com, bpf@vger.kernel.org
Subject: [PATCH 0/5] Replace invocations of prandom_u32 with get_random_u32
Date: Mon, 12 Dec 2022 00:16:03 +0200	[thread overview]
Message-ID: <cover.1670778651.git.david.keisarschm@mail.huji.ac.il> (raw)

From: David <david.keisarschm@mail.huji.ac.il>

The security improvements for prandom_u32 done specifically in
commits c51f8f88d705e06bd696d7510aff22b33eb8e638 from October 2020
 and d4150779e60fb6c49be25572596b2cdfc5d46a09 from May 2022)
 didn't handle the cases when prandom_bytes_state() and prandom_u32_state()
  are used. We have now added the necessary changes to handle
   these cases as  well.


David (5):
  Renaming weak prng invocations - prandom_bytes_state,
    prandom_u32_state
  Replace invocation of weak PRNG in kernel/bpf/core.c
  Replace invocation of weak PRNG in mm/slab.c
  Replace invocation of weak PRNG inside mm/slab_common.c
  Replace invocation of weak PRNG in arch/x86/mm/kaslr.c

 arch/x86/mm/kaslr.c                           |  5 +--
 .../gpu/drm/i915/gem/selftests/huge_pages.c   |  2 +-
 .../i915/gem/selftests/i915_gem_client_blt.c  |  2 +-
 .../i915/gem/selftests/i915_gem_coherency.c   |  2 +-
 .../drm/i915/gem/selftests/i915_gem_context.c |  2 +-
 drivers/gpu/drm/i915/gt/selftest_lrc.c        |  2 +-
 drivers/gpu/drm/i915/gt/selftest_migrate.c    |  2 +-
 drivers/gpu/drm/i915/gt/selftest_timeline.c   |  4 +-
 drivers/gpu/drm/i915/selftests/i915_random.c  |  4 +-
 drivers/gpu/drm/i915/selftests/i915_random.h  |  4 +-
 drivers/gpu/drm/i915/selftests/i915_syncmap.c |  4 +-
 .../drm/i915/selftests/intel_memory_region.c  | 10 ++---
 drivers/gpu/drm/i915/selftests/scatterlist.c  |  4 +-
 drivers/gpu/drm/lib/drm_random.c              |  2 +-
 drivers/mtd/tests/oobtest.c                   | 10 ++---
 drivers/mtd/tests/pagetest.c                  | 12 +++---
 drivers/mtd/tests/subpagetest.c               | 12 +++---
 drivers/scsi/fcoe/fcoe_ctlr.c                 |  2 +-
 include/linux/bpf.h                           |  1 -
 include/linux/prandom.h                       |  6 +--
 kernel/bpf/core.c                             | 13 +-----
 kernel/bpf/verifier.c                         |  2 -
 lib/interval_tree_test.c                      |  6 +--
 lib/random32.c                                | 42 +++++++++----------
 lib/rbtree_test.c                             |  4 +-
 lib/test_bpf.c                                |  2 +-
 lib/test_parman.c                             |  2 +-
 lib/test_scanf.c                              |  8 ++--
 mm/slab.c                                     | 20 ++++-----
 mm/slab_common.c                              | 10 ++---
 net/core/filter.c                             |  1 -
 31 files changed, 88 insertions(+), 114 deletions(-)

-- 
2.38.0


             reply	other threads:[~2022-12-11 22:16 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-12-11 22:16 david.keisarschm [this message]
2022-12-11 22:16 ` [PATCH 1/5] Renaming weak prng invocations - prandom_bytes_state, prandom_u32_state david.keisarschm
2022-12-12  8:35   ` Andy Shevchenko
2022-12-12 14:35   ` Jason A. Donenfeld
2022-12-14 12:33     ` Stanislaw Gruszka
2022-12-14 15:15       ` Eric Dumazet
2022-12-14 15:53         ` Andy Shevchenko
2022-12-14 15:57           ` Andy Shevchenko
2022-12-14 16:21         ` Stanislaw Gruszka
2022-12-14 18:28           ` Theodore Ts'o
2022-12-11 22:16 ` [PATCH 2/5] Replace invocation of weak PRNG in kernel/bpf/core.c david.keisarschm
2022-12-12 18:03   ` Yonghong Song
2022-12-12 22:35     ` Amit Klein
2022-12-12 22:41       ` Jason A. Donenfeld

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1670778651.git.david.keisarschm@mail.huji.ac.il \
    --to=david.keisarschm@mail.huji.ac.il \
    --cc=aksecurity@gmail.com \
    --cc=bpf@vger.kernel.org \
    --cc=ilay.bahat1@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox