From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,NICE_REPLY_A,SPF_HELO_NONE, SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id AFB5BC433DB for ; Tue, 22 Dec 2020 14:17:32 +0000 (UTC) Received: from lists.ozlabs.org (lists.ozlabs.org [203.11.71.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id D391E2311D for ; Tue, 22 Dec 2020 14:17:30 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org D391E2311D Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=huawei.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=linuxppc-dev-bounces+linuxppc-dev=archiver.kernel.org@lists.ozlabs.org Received: from bilbo.ozlabs.org (lists.ozlabs.org [IPv6:2401:3900:2:1::3]) by lists.ozlabs.org (Postfix) with ESMTP id 4D0dhS3QHLzDqlr for ; Wed, 23 Dec 2020 01:17:28 +1100 (AEDT) Authentication-Results: lists.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=huawei.com (client-ip=45.249.212.191; helo=szxga05-in.huawei.com; envelope-from=nixiaoming@huawei.com; receiver=) Authentication-Results: lists.ozlabs.org; dmarc=none (p=none dis=none) header.from=huawei.com Received: from szxga05-in.huawei.com (szxga05-in.huawei.com [45.249.212.191]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4D0czV59mxzDqGL for ; Wed, 23 Dec 2020 00:45:26 +1100 (AEDT) Received: from DGGEMS407-HUB.china.huawei.com (unknown [172.30.72.59]) by szxga05-in.huawei.com (SkyGuard) with ESMTP id 4D0cy65Bv6zLxlQ; Tue, 22 Dec 2020 21:44:14 +0800 (CST) Received: from [10.67.102.197] (10.67.102.197) by DGGEMS407-HUB.china.huawei.com (10.3.19.207) with Microsoft SMTP Server id 14.3.498.0; Tue, 22 Dec 2020 21:45:03 +0800 Subject: Re: [PATCH] powerpc:Don't print raw EIP/LR hex values in dump_stack() and show_regs() To: Segher Boessenkool , David Laight References: <20201221032758.12143-1-nixiaoming@huawei.com> <2279fc96-1f10-0c3f-64d9-734f18758620@csgroup.eu> <20201221163130.GZ2672@gate.crashing.org> <20201221171228.GA2672@gate.crashing.org> From: Xiaoming Ni Message-ID: <9b874bd4-9ac8-eb94-8432-8d6193c3feaf@huawei.com> Date: Tue, 22 Dec 2020 21:45:03 +0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.0.1 MIME-Version: 1.0 In-Reply-To: <20201221171228.GA2672@gate.crashing.org> Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [10.67.102.197] X-CFilter-Loop: Reflected X-BeenThere: linuxppc-dev@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Linux on PowerPC Developers Mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: "ravi.bangoria@linux.ibm.com" , "mikey@neuling.org" , "yanaijie@huawei.com" , "wangle6@huawei.com" , "haren@linux.ibm.com" , "linux-kernel@vger.kernel.org" , "paulus@samba.org" , "npiggin@gmail.com" , "aneesh.kumar@linux.ibm.com" , "linuxppc-dev@lists.ozlabs.org" Errors-To: linuxppc-dev-bounces+linuxppc-dev=archiver.kernel.org@lists.ozlabs.org Sender: "Linuxppc-dev" On 2020/12/22 1:12, Segher Boessenkool wrote: > On Mon, Dec 21, 2020 at 04:42:23PM +0000, David Laight wrote: >> From: Segher Boessenkool >>> Sent: 21 December 2020 16:32 >>> >>> On Mon, Dec 21, 2020 at 04:17:21PM +0100, Christophe Leroy wrote: >>>> Le 21/12/2020 à 04:27, Xiaoming Ni a écrit : >>>>> Since the commit 2b0e86cc5de6 ("powerpc/fsl_booke/32: implement KASLR >>>>> infrastructure"), the powerpc system is ready to support KASLR. >>>>> To reduces the risk of invalidating address randomization, don't print the >>>>> EIP/LR hex values in dump_stack() and show_regs(). >>> >>>> I think your change is not enough to hide EIP address, see below a dump >>>> with you patch, you get "Faulting instruction address: 0xc03a0c14" >>> >>> As far as I can see the patch does nothing to the GPR printout. Often >>> GPRs contain code addresses. As one example, the LR is moved via a GPR >>> (often GPR0, but not always) for storing on the stack. >>> >>> So this needs more work. >> >> If the dump_stack() is from an oops you need the real EIP value >> on order to stand any chance of making headway. > > Or at least the function name + offset, yes. > When the system is healthy, only symbols and offsets are printed, Output address and symbol + offset when the system is dying Does this meet both debugging and security requirements? For example: +static void __show_regs_ip_lr(const char *flag, unsigned long addr) +{ + if (system_going_down()) { /* panic oops reboot */ + pr_cont("%s["REG"] %pS", flag, addr, (void *)addr); + } else { + pr_cont("%s%pS", flag, (void *)addr); + } +} + static void __show_regs(struct pt_regs *regs) { int i, trap; - printk("NIP: "REG" LR: "REG" CTR: "REG"\n", - regs->nip, regs->link, regs->ctr); + __show_regs_ip_lr("NIP: ", regs->nip); + __show_regs_ip_lr(" LR: ", regs->link); + pr_cont(" CTR: "REG"\n", regs->ctr); printk("REGS: %px TRAP: %04lx %s (%s)\n", regs, regs->trap, print_tainted(), init_utsname()->release); printk("MSR: "REG" ", regs->msr); >> Otherwise you might just as well just print 'borked - tough luck'. > > Yes. ASLR is a house of cards. But that isn't constructive wrt this > patch :-) > > > Segher > . > Thanks Xiaoming Ni