From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751631AbbC2Ivc (ORCPT ); Sun, 29 Mar 2015 04:51:32 -0400 Received: from mail-wi0-f175.google.com ([209.85.212.175]:36545 "EHLO mail-wi0-f175.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751001AbbC2Iv1 (ORCPT ); Sun, 29 Mar 2015 04:51:27 -0400 Date: Sun, 29 Mar 2015 10:51:22 +0200 From: Ingo Molnar To: Borislav Petkov Cc: Hector Marco-Gisbert , linux-kernel@vger.kernel.org, akpm@linux-foundation.org, Thomas Gleixner , Ingo Molnar , "H. Peter Anvin" , x86@kernel.org, Alexander Viro , Jan-Simon , linux-fsdevel@vger.kernel.org, kees Cook , Ismael Ripoll Subject: Re: [PATCH] mm/x86: AMD Bulldozer ASLR fix Message-ID: <20150329085122.GA25177@gmail.com> References: <20150326190800.GF27751@pd.tnic> <1427456301-3764-1-git-send-email-hecmargi@upv.es> <20150327144438.GA3254@pd.tnic> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20150327144438.GA3254@pd.tnic> User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org * Borislav Petkov wrote: > From: Hector Marco-Gisbert > Date: Fri, 27 Mar 2015 12:38:21 +0100 > Subject: [PATCH] x86/mm: Improve AMD Bulldozer ASLR fix > > The ASLR implementation needs to special-case AMD F15h processors by > clearing out bits [14:12] of the virtual address in order to avoid I$ > cross invalidations and thus performance penalty for certain workloads. > For details, see: > > dfb09f9b7ab0 ("x86, amd: Avoid cache aliasing penalties on AMD family 15h") > > This special case reduces the mmapped files entropy by eight. s/reduces the mmapped file's entropy by 3 bits Which does: - a grammar fix - measure it in bits, as later on we are talking about randomness in bits as well. Btw., does this limitation affect both executable and non-executable mmap()s? Because data mmap()s don't need this I$ related workaround, right? So we could relax it for data-mmap()s? Thanks, Ingo