From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755287AbdKBIXx (ORCPT ); Thu, 2 Nov 2017 04:23:53 -0400 Received: from mail-pg0-f65.google.com ([74.125.83.65]:45968 "EHLO mail-pg0-f65.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751567AbdKBIXu (ORCPT ); Thu, 2 Nov 2017 04:23:50 -0400 X-Google-Smtp-Source: ABhQp+Rdumgg4MTZbGyIS5Q8C62iMdO4gcwj9zucGiMDHvaKBSybtfy7OUALDI9+XCaMcajUiU47dQ== Date: Thu, 2 Nov 2017 17:23:44 +0900 From: Sergey Senozhatsky To: "Tobin C. Harding" Cc: Sergey Senozhatsky , kernel-hardening@lists.openwall.com, "Jason A. Donenfeld" , "Theodore Ts'o" , Linus Torvalds , Kees Cook , Paolo Bonzini , Tycho Andersen , "Roberts, William C" , Tejun Heo , Jordan Glover , Greg KH , Petr Mladek , Joe Perches , Ian Campbell , Catalin Marinas , Will Deacon , Steven Rostedt , Chris Fries , Dave Weinstein , Daniel Micay , Djalal Harouni , linux-kernel@vger.kernel.org Subject: Re: [PATCH V8 0/2] printk: hash addresses printed with %p Message-ID: <20171102082344.GC655@jagdpanzerIV> References: <1508986436-31966-1-git-send-email-me@tobin.cc> <20171027133301.GA612@tigerII.localdomain> <20171031233533.GD3585@eros> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20171031233533.GD3585@eros> User-Agent: Mutt/1.9.1 (2017-09-22) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On (11/01/17 10:35), Tobin C. Harding wrote: [..] > Yes. The question has been raised will we be here again in 6 years time > trying to fix all the uses of %x. And there are already 29K uses of > %[xX] in tree, which of these are leaking addresses? This is why Linus' > has commented that really effort should be directed at finding the leaks > as they happen (in procfs, sysfs, dmesg) instead of fixing this in > the code. got it. thanks. > So far I haven't been able to come up with any meaningful way > to do this on 32 bit machines. There is a patch adding a script to catch > leaks on 64 bit machines in flight. who is expected to run that script? BTW, can BPF/eBPF printk addresses? > This patch needs to be a small part of a continued effort to stop the > leaks if we want to have any hope of stopping them. > > If you have any suggestions on dealing with %x please do say. We have > code changes, compiler warnings, and checkpatch - none of which > immediately seem great. hm... just a huge pile of if's if (is_vmalloc_addr(addr)) do_hashing(addr); else if (__module_address(addr)) do_hashing(addr); else if (is_kernel(addr) || is_kernel_inittext(addr)) ... but that's going to be really messy and "iffy". -ss