From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 87E1730ACF3; Thu, 23 Oct 2025 09:59:09 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=192.198.163.12 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1761213552; cv=none; b=AF9YOfAOh6ecpKZk/5tlWWyDqSXF6Qh/W8baNu64kb/uAGE3nAT12IkbUxhP0ZZxMNUmAbFloIt/wGE3HuPO/mHhwrWq6LPZP3lCyxMZVmou/LQGZ0slAANQv2GGXBOh9tVptonvFNeWTjRy1JGQjbkS8X875ueng/MgcCcDEDU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1761213552; c=relaxed/simple; bh=hLHspmGDv35B6GcYo8xeUzrN+VASjexvom1/JYJa8H4=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=pRiDAmp7mKFud5mxYL4xWKwkpM7yGONL1/lCVrw1wZ3rO43FL48dVjSF9jK1bsia3i5D3J+q1BVfWITduZ2NOPS6D/1YxvKwbwZI/XIeYvc0xXr51kgMqTeGTIGTNTfW05SQhSmCOZmjlHoR7bH8im+HsSZi8WAmSPxdQqWCOWo= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=APGEPIK+; arc=none smtp.client-ip=192.198.163.12 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="APGEPIK+" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1761213550; x=1792749550; h=date:from:to:cc:subject:message-id:references: mime-version:in-reply-to; bh=hLHspmGDv35B6GcYo8xeUzrN+VASjexvom1/JYJa8H4=; b=APGEPIK+54dei5tu5mCfFcw/4LtVXMWtWLPPM9Hztwhx82DgJlhIp1fh KVinWMeSjVyOKuVpup06AGB5WwsQDXTUW17uZu1TuA9fyaH9xk1STokzC erPY/RB5AzQFavap3kDjKgbOq5TN1doyGeNtW40GjVbSD9ztbrbEsRSVc N0/OmGw18JOGYB2jex/0JX0WNSCjJRwlAyTRHbGySanfReyKYohCzRB9g zMByTmXNeYYVviG+H5Yt2i9lBfBhT5og2pOJrml5e4ZSYFzUabwMUyg82 +DjkXKZBK98uTQQjrr9Vr8u1Jks6mMar1+nAjfs7Mfy/v7xzOod+o4pao Q==; X-CSE-ConnectionGUID: BpFhDXkPRCKxxr83zyJRbw== X-CSE-MsgGUID: C6b9NV/4QOOxneU0/T6bQw== X-IronPort-AV: E=McAfee;i="6800,10657,11586"; a="67245165" X-IronPort-AV: E=Sophos;i="6.19,249,1754982000"; d="scan'208";a="67245165" Received: from fmviesa008.fm.intel.com ([10.60.135.148]) by fmvoesa106.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 23 Oct 2025 02:59:10 -0700 X-CSE-ConnectionGUID: A+LTjFrbTlOcjq+81WMNtw== X-CSE-MsgGUID: wc3Epmm/TVugzuppfp0p6A== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.19,249,1754982000"; d="scan'208";a="184510118" Received: from lkp-server02.sh.intel.com (HELO 66d7546c76b2) ([10.239.97.151]) by fmviesa008.fm.intel.com with ESMTP; 23 Oct 2025 02:59:06 -0700 Received: from kbuild by 66d7546c76b2 with local (Exim 4.96) (envelope-from ) id 1vBs5z-000DKl-1q; Thu, 23 Oct 2025 09:59:01 +0000 Date: Thu, 23 Oct 2025 17:58:34 +0800 From: kernel test robot To: Siddharth Nayyar , petr.pavlu@suse.com Cc: llvm@lists.linux.dev, oe-kbuild-all@lists.linux.dev, arnd@arndb.de, linux-arch@vger.kernel.org, linux-kbuild@vger.kernel.org, linux-kernel@vger.kernel.org, linux-modules@vger.kernel.org, mcgrof@kernel.org, nathan@kernel.org, nicolas.schier@linux.dev, samitolvanen@google.com, sidnayyar@google.com, maennich@google.com, gprocida@google.com Subject: Re: [PATCH v2 10/10] module loader: enforce symbol import protection Message-ID: <202510231707.zbQhQZmN-lkp@intel.com> References: <20251013153918.2206045-11-sidnayyar@google.com> Precedence: bulk X-Mailing-List: linux-arch@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20251013153918.2206045-11-sidnayyar@google.com> Hi Siddharth, kernel test robot noticed the following build errors: [auto build test ERROR on arnd-asm-generic/master] [also build test ERROR on soc/for-next linus/master v6.18-rc2 next-20251023] [cannot apply to mcgrof/modules-next] [If your patch is applied to the wrong git tree, kindly drop us a note. And when submitting patch, we suggest to use '--base' as documented in https://git-scm.com/docs/git-format-patch#_base_tree_information] url: https://github.com/intel-lab-lkp/linux/commits/Siddharth-Nayyar/define-kernel-symbol-flags/20251021-104658 base: https://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic.git master patch link: https://lore.kernel.org/r/20251013153918.2206045-11-sidnayyar%40google.com patch subject: [PATCH v2 10/10] module loader: enforce symbol import protection config: x86_64-kexec (https://download.01.org/0day-ci/archive/20251023/202510231707.zbQhQZmN-lkp@intel.com/config) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251023/202510231707.zbQhQZmN-lkp@intel.com/reproduce) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot | Closes: https://lore.kernel.org/oe-kbuild-all/202510231707.zbQhQZmN-lkp@intel.com/ All errors (new ones prefixed by >>): >> kernel/module/main.c:1271:32: error: no member named 'sig_ok' in 'struct module' 1271 | if (fsa.is_protected && !mod->sig_ok) { | ~~~ ^ 1 error generated. vim +1271 kernel/module/main.c 1228 1229 /* Resolve a symbol for this module. I.e. if we find one, record usage. */ 1230 static const struct kernel_symbol *resolve_symbol(struct module *mod, 1231 const struct load_info *info, 1232 const char *name, 1233 char ownername[]) 1234 { 1235 struct find_symbol_arg fsa = { 1236 .name = name, 1237 .gplok = !(mod->taints & (1 << TAINT_PROPRIETARY_MODULE)), 1238 .warn = true, 1239 }; 1240 int err; 1241 1242 /* 1243 * The module_mutex should not be a heavily contended lock; 1244 * if we get the occasional sleep here, we'll go an extra iteration 1245 * in the wait_event_interruptible(), which is harmless. 1246 */ 1247 sched_annotate_sleep(); 1248 mutex_lock(&module_mutex); 1249 if (!find_symbol(&fsa)) 1250 goto unlock; 1251 1252 if (fsa.license == GPL_ONLY) 1253 mod->using_gplonly_symbols = true; 1254 1255 if (!inherit_taint(mod, fsa.owner, name)) { 1256 fsa.sym = NULL; 1257 goto getname; 1258 } 1259 1260 if (!check_version(info, name, mod, fsa.crc)) { 1261 fsa.sym = ERR_PTR(-EINVAL); 1262 goto getname; 1263 } 1264 1265 err = verify_namespace_is_imported(info, fsa.sym, mod); 1266 if (err) { 1267 fsa.sym = ERR_PTR(err); 1268 goto getname; 1269 } 1270 > 1271 if (fsa.is_protected && !mod->sig_ok) { 1272 pr_warn("%s: Cannot use protected symbol %s\n", 1273 mod->name, name); 1274 fsa.sym = ERR_PTR(-EACCES); 1275 goto getname; 1276 } 1277 1278 err = ref_module(mod, fsa.owner); 1279 if (err) { 1280 fsa.sym = ERR_PTR(err); 1281 goto getname; 1282 } 1283 1284 getname: 1285 /* We must make copy under the lock if we failed to get ref. */ 1286 strscpy(ownername, module_name(fsa.owner), MODULE_NAME_LEN); 1287 unlock: 1288 mutex_unlock(&module_mutex); 1289 return fsa.sym; 1290 } 1291 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki