public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
From: Tejun Heo <tj@kernel.org>
To: Ingo Molnar <mingo@elte.hu>
Cc: Brian Gerst <brgerst@gmail.com>,
	hpa@zytor.com, jeremy@goop.org, tglx@linutronix.de,
	linux-kernel@vger.kernel.org, x86@kernel.org,
	rusty@rustcorp.com.au
Subject: Re: [PATCH x86#core/percpu] x86: fix x86_32 stack protector bugs
Date: Wed, 11 Feb 2009 23:18:09 +0900	[thread overview]
Message-ID: <4992DE21.80706@kernel.org> (raw)
In-Reply-To: <20090211103456.GK20518@elte.hu>

Ingo Molnar wrote:
> * Tejun Heo <tj@kernel.org> wrote:
> 
>> Impact: fix x86_32 stack protector
>>
>> Brian Gerst found out that %gs was being initialized to stack_canary
>> instead of stack_canary - 20, which basically gave the same canary
>> value for all threads.  Fixing this also exposed the following bugs.
>>
>> * cpu_idle() didn't call boot_init_stack_canary()
>>
>> * stack canary switching in switch_to() was being done too late making
>>   the initial run of a new thread use the old stack canary value.
>>
>> Fix all of them and while at it update comment in cpu_idle() about
>> calling boot_init_stack_canary().
>>
>> Signed-off-by: Tejun Heo <tj@kernel.org>
>> Reported-by: Brian Gerst <brgerst@gmail.com>
>> ---
>>  arch/x86/include/asm/stackprotector.h |    2 +-
>>  arch/x86/include/asm/system.h         |    8 +++-----
>>  arch/x86/kernel/head_32.S             |    1 +
>>  arch/x86/kernel/process_32.c          |   10 ++++++++++
>>  arch/x86/kernel/process_64.c          |   11 +++++------
>>  5 files changed, 20 insertions(+), 12 deletions(-)
> 
> Applied to tip:core/percpu, thanks guys!
> 
> I never got around to finding his bug in practice as the latest bits of 
> tip:core/percpu are not in tip/master at the moment, due to that 64-bit
> build failure.

I was kind of waiting for your test result (whether the build issue
can be reproduced without distcc) before going ahead and building a
cross compiler.  I don't see how the cross compiler would pass the
gcc-x86_*-has-stack-protector.sh test which builds a minimalistic c
file and greps for %gs access.

Thanks.

-- 
tejun

  reply	other threads:[~2009-02-11 14:19 UTC|newest]

Thread overview: 48+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-02-09 13:39 [PATCHSET x86/master] add stack protector support for x86_32 Tejun Heo
2009-02-09 13:39 ` [PATCH 01/11] x86: include correct %gs in a.out core dump Tejun Heo
2009-02-09 17:12   ` Jeremy Fitzhardinge
2009-02-09 13:39 ` [PATCH 02/11] x86: math_emu info cleanup Tejun Heo
2009-02-09 13:42   ` Ingo Molnar
2009-02-09 13:45     ` Ingo Molnar
2009-02-09 13:52       ` Tejun Heo
2009-02-09 13:39 ` [PATCH 03/11] x86: fix math_emu register frame access Tejun Heo
2009-02-09 17:13   ` Brian Gerst
2009-02-09 23:40     ` Ingo Molnar
2009-02-10  1:08     ` Tejun Heo
2009-02-09 13:39 ` [PATCH 04/11] elf: add ELF_CORE_COPY_KERNEL_REGS() Tejun Heo
2009-02-09 13:39 ` [PATCH 05/11] x86: stackprotector.h misc update Tejun Heo
2009-02-09 13:39 ` [PATCH 06/11] stackprotector: update make rules Tejun Heo
2009-02-09 13:39 ` [PATCH 07/11] x86: no stack protector for vdso Tejun Heo
2009-02-09 13:39 ` [PATCH 08/11] x86: use asm .macro instead of cpp #define in entry_32.S Tejun Heo
2009-02-09 18:34   ` Jeremy Fitzhardinge
2009-02-10  1:14     ` Tejun Heo
2009-02-10  1:18       ` Jeremy Fitzhardinge
2009-02-10 11:11         ` Ingo Molnar
2009-02-09 13:39 ` [PATCH 09/11] x86: add %gs accessors for x86_32 Tejun Heo
2009-02-09 13:39 ` [PATCH 10/11] x86: make lazy %gs optional on x86_32 Tejun Heo
2009-02-09 18:12   ` Jeremy Fitzhardinge
2009-02-10  1:27     ` Tejun Heo
2009-02-10  1:51       ` Jeremy Fitzhardinge
2009-02-09 13:39 ` [PATCH 11/11] x86: implement x86_32 stack protector Tejun Heo
2009-02-10 15:25   ` Brian Gerst
2009-02-10 15:39     ` Tejun Heo
2009-02-11  7:31       ` [PATCH x86#core/percpu] x86: fix x86_32 stack protector bugs Tejun Heo
2009-02-11 10:34         ` Ingo Molnar
2009-02-11 14:18           ` Tejun Heo [this message]
2009-02-09 13:55 ` [PATCHSET x86/master] add stack protector support for x86_32 Ingo Molnar
2009-02-09 14:06   ` Ingo Molnar
2009-02-09 20:30     ` Ingo Molnar
2009-02-10 13:56       ` Tejun Heo
2009-02-10 14:16         ` Ingo Molnar
2009-02-09 14:12   ` Ingo Molnar
2009-02-10 13:54     ` Tejun Heo
2009-02-10 14:16       ` Tejun Heo
2009-02-10 14:20         ` Ingo Molnar
2009-02-10 14:26           ` Tejun Heo
2009-02-11 10:57             ` Ingo Molnar
2009-02-11 11:18               ` [PATCH] stackprotector: fix multi-word cross-builds Ingo Molnar
2009-02-11 14:19                 ` Tejun Heo
2009-02-10 14:19       ` [PATCHSET x86/master] add stack protector support for x86_32 Ingo Molnar
2009-02-09 14:09 ` Brian Gerst
2009-02-09 14:15   ` Ingo Molnar
2009-02-10  1:36     ` Tejun Heo

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4992DE21.80706@kernel.org \
    --to=tj@kernel.org \
    --cc=brgerst@gmail.com \
    --cc=hpa@zytor.com \
    --cc=jeremy@goop.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=mingo@elte.hu \
    --cc=rusty@rustcorp.com.au \
    --cc=tglx@linutronix.de \
    --cc=x86@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox