From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753400AbdJ3WoX (ORCPT ); Mon, 30 Oct 2017 18:44:23 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:58073 "EHLO out4-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932718AbdJ3WlG (ORCPT ); Mon, 30 Oct 2017 18:41:06 -0400 X-ME-Sender: Date: Tue, 31 Oct 2017 09:41:02 +1100 From: "Tobin C. Harding" To: Steven Rostedt Cc: kernel-hardening@lists.openwall.com, "Jason A. Donenfeld" , "Theodore Ts'o" , Linus Torvalds , Kees Cook , Paolo Bonzini , Tycho Andersen , "Roberts, William C" , Tejun Heo , Jordan Glover , Greg KH , Petr Mladek , Joe Perches , Ian Campbell , Sergey Senozhatsky , Catalin Marinas , Will Deacon , Chris Fries , Dave Weinstein , Daniel Micay , Djalal Harouni , linux-kernel@vger.kernel.org Subject: Re: [PATCH V8 2/2] printk: hash addresses printed with %p Message-ID: <20171030224102.GY12341@eros> References: <1508986436-31966-1-git-send-email-me@tobin.cc> <1508986436-31966-3-git-send-email-me@tobin.cc> <20171026025838.GG12341@eros> <20171030173322.6ebed7db@gandalf.local.home> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20171030173322.6ebed7db@gandalf.local.home> X-Mailer: Mutt 1.5.24 (2015-08-30) User-Agent: Mutt/1.5.24 (2015-08-30) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Oct 30, 2017 at 05:33:22PM -0400, Steven Rostedt wrote: > On Thu, 26 Oct 2017 13:58:38 +1100 > "Tobin C. Harding" wrote: > > > > +static bool have_filled_random_ptr_key; > > > +static siphash_key_t ptr_key __read_mostly; > > > + > > > +static void fill_random_ptr_key(struct random_ready_callback *unused) > > > +{ > > > + get_random_bytes(&ptr_key, sizeof(ptr_key)); > > > + WRITE_ONCE(have_filled_random_ptr_key, true); > > > > This usage of WRITE_ONCE was suggested by Jason A. Donenfeld. I read > > include/linux/compiler.h but was not able to grok it. Is this enough to > > stop the compiler re-ordering these two statements? > > > > Or do I need to read Documentation/memory-barriers.txt [again]? > > No, the WRITE_ONCE does not stop the compiler from reordering those > statements. If you need that, then you need to do: > > get_random_bytes(&ptr_key, sizeof(ptr_key)); > barrier(); > WRITE_ONCE(have_filled_random_ptr_key, true); > > and that only works against interrupts. If you need synchronization > across CPUs, then you need smp_mb(). Cool. So I think we need get_random_bytes(&ptr_key, sizeof(ptr_key)); smp_mb(); WRITE_ONCE(have_filled_random_ptr_key, true); V10 to include this unless I have it wrong. thanks, Tobin.