Re: [PATCH 00/35] Shadow stacks for userspace

[PATCH 00/35] Shadow stacks for userspace · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 01/35] Documentation/x86: Add CET description · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 02/35] x86/cet/shstk: Add Kconfig option for Shadow Stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 02/35] x86/cet/shstk: Add Kconfig option for Shadow Stack · Dave Hansen <hidden> · 2022-02-07
Re: [PATCH 02/35] x86/cet/shstk: Add Kconfig option for Shadow Stack · Thomas Gleixner <hidden> · 2022-02-08
Re: [PATCH 02/35] x86/cet/shstk: Add Kconfig option for Shadow Stack · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
Re: [PATCH 02/35] x86/cet/shstk: Add Kconfig option for Shadow Stack · Thomas Gleixner <hidden> · 2022-02-08
[PATCH 03/35] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 03/35] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Dave Hansen <hidden> · 2022-02-07
Re: [PATCH 03/35] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
Re: [PATCH 03/35] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Kees Cook <hidden> · 2022-02-09
[PATCH 04/35] x86/cpufeatures: Introduce CPU setup and option parsing for CET · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 04/35] x86/cpufeatures: Introduce CPU setup and option parsing for CET · Dave Hansen <hidden> · 2022-02-07
Re: [PATCH 04/35] x86/cpufeatures: Introduce CPU setup and option parsing for CET · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
[PATCH 05/35] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 05/35] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · Dave Hansen <hidden> · 2022-02-08
Re: [PATCH 05/35] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
[PATCH 07/35] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 07/35] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · Dave Hansen <hidden> · 2022-02-08
Re: [PATCH 07/35] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
[PATCH 08/35] x86/mm: Move pmd_write(), pud_write() up in the file · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 11/35] x86/mm: Update pte_modify for _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 11/35] x86/mm: Update pte_modify for _PAGE_COW · Dave Hansen <hidden> · 2022-02-09
[PATCH 14/35] mm: Introduce VM_SHADOW_STACK for shadow stack memory · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 14/35] mm: Introduce VM_SHADOW_STACK for shadow stack memory · Dave Hansen <hidden> · 2022-02-09
[PATCH 13/35] mm: Move VM_UFFD_MINOR_BIT from 37 to 38 · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 12/35] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 12/35] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW · Dave Hansen <hidden> · 2022-02-09
[PATCH 09/35] x86/mm: Introduce _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 09/35] x86/mm: Introduce _PAGE_COW · Dave Hansen <hidden> · 2022-02-08
[PATCH 10/35] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 10/35] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · Dave Hansen <hidden> · 2022-02-09
Re: [PATCH 10/35] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-11
Re: [PATCH 10/35] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · Wang, Zhi A <hidden> · 2022-02-11
Re: [PATCH 10/35] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-12
[PATCH 15/35] x86/mm: Check Shadow Stack page fault errors · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 15/35] x86/mm: Check Shadow Stack page fault errors · Dave Hansen <hidden> · 2022-02-09
[PATCH 06/35] x86/cet: Add control-protection fault handler · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 06/35] x86/cet: Add control-protection fault handler · Dave Hansen <hidden> · 2022-02-08
Re: [PATCH 06/35] x86/cet: Add control-protection fault handler · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
[PATCH 16/35] x86/mm: Update maybe_mkwrite() for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 16/35] x86/mm: Update maybe_mkwrite() for shadow stack · Dave Hansen <hidden> · 2022-02-09
[PATCH 17/35] mm: Fixup places that call pte_mkwrite() directly · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 17/35] mm: Fixup places that call pte_mkwrite() directly · Dave Hansen <hidden> · 2022-02-09
[PATCH 18/35] mm: Add guard pages around a shadow stack. · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · Dave Hansen <hidden> · 2022-02-09
RE: [PATCH 18/35] mm: Add guard pages around a shadow stack. · David Laight <hidden> · 2022-02-10
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-10
RE: [PATCH 18/35] mm: Add guard pages around a shadow stack. · David Laight <hidden> · 2022-02-11
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · Dave Hansen <hidden> · 2022-02-10
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · Andy Lutomirski <luto@kernel.org> · 2022-02-10
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-10
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · Andy Lutomirski <luto@kernel.org> · 2022-02-11
Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-12
[PATCH 19/35] mm/mmap: Add shadow stack pages to memory accounting · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 19/35] mm/mmap: Add shadow stack pages to memory accounting · Dave Hansen <hidden> · 2022-02-09
[PATCH 22/35] x86/mm: Prevent VM_WRITE shadow stacks · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 22/35] x86/mm: Prevent VM_WRITE shadow stacks · Dave Hansen <hidden> · 2022-02-11
Re: [PATCH 22/35] x86/mm: Prevent VM_WRITE shadow stacks · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-12
[PATCH 20/35] mm: Update can_follow_write_pte() for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 20/35] mm: Update can_follow_write_pte() for shadow stack · Dave Hansen <hidden> · 2022-02-09
Re: [PATCH 20/35] mm: Update can_follow_write_pte() for shadow stack · Dave Hansen <hidden> · 2022-02-09
RE: [PATCH 20/35] mm: Update can_follow_write_pte() for shadow stack · David Laight <hidden> · 2022-02-10
[PATCH 21/35] mm/mprotect: Exclude shadow stack from preserve_write · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 21/35] mm/mprotect: Exclude shadow stack from preserve_write · Dave Hansen <hidden> · 2022-02-10
[PATCH 29/35] x86/cet/shstk: Introduce shadow stack token setup/verify routines · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 30/35] x86/cet/shstk: Handle signals for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 31/35] x86/cet/shstk: Add arch_prctl elf feature functions · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 23/35] x86/fpu: Add helpers for modifying supervisor xstate · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 23/35] x86/fpu: Add helpers for modifying supervisor xstate · Thomas Gleixner <hidden> · 2022-02-08
Re: [PATCH 23/35] x86/fpu: Add helpers for modifying supervisor xstate · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-09
Re: [PATCH 23/35] x86/fpu: Add helpers for modifying supervisor xstate · Dave Hansen <hidden> · 2022-02-12
Re: [PATCH 23/35] x86/fpu: Add helpers for modifying supervisor xstate · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-12
[PATCH 25/35] x86/cet/shstk: Add user-mode shadow stack support · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 25/35] x86/cet/shstk: Add user-mode shadow stack support · Dave Hansen <hidden> · 2022-02-11
Re: [PATCH 25/35] x86/cet/shstk: Add user-mode shadow stack support · "Andy Lutomirski" <luto@kernel.org> · 2022-02-12
Re: [PATCH 25/35] x86/cet/shstk: Add user-mode shadow stack support · Dave Hansen <hidden> · 2022-02-12
Re: [PATCH 25/35] x86/cet/shstk: Add user-mode shadow stack support · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-12
[PATCH 33/35] selftests/x86: Add map_shadow_stack syscall test · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 33/35] selftests/x86: Add map_shadow_stack syscall test · Dave Hansen <hidden> · 2022-02-03
Re: [PATCH 33/35] selftests/x86: Add map_shadow_stack syscall test · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-04
[PATCH 26/35] x86/process: Change copy_thread() argument 'arg' to 'stack_size' · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 26/35] x86/process: Change copy_thread() argument 'arg' to 'stack_size' · Thomas Gleixner <hidden> · 2022-02-08
Re: [PATCH 26/35] x86/process: Change copy_thread() argument 'arg' to 'stack_size' · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-11
Re: [PATCH 26/35] x86/process: Change copy_thread() argument 'arg' to 'stack_size' · Jann Horn <jannh@google.com> · 2022-02-14
Re: [PATCH 26/35] x86/process: Change copy_thread() argument 'arg' to 'stack_size' · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-15
Re: [PATCH 26/35] x86/process: Change copy_thread() argument 'arg' to 'stack_size' · Christian Brauner <brauner@kernel.org> · 2022-02-15
[PATCH 34/35] x86/cet/shstk: Support wrss for userspace · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 32/35] x86/cet/shstk: Introduce map_shadow_stack syscall · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 35/35] x86/cpufeatures: Limit shadow stack to Intel CPUs · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 35/35] x86/cpufeatures: Limit shadow stack to Intel CPUs · John Allen <john.allen@amd.com> · 2022-02-03
Re: [PATCH 35/35] x86/cpufeatures: Limit shadow stack to Intel CPUs · H.J. Lu <hidden> · 2022-02-03
Re: [PATCH 35/35] x86/cpufeatures: Limit shadow stack to Intel CPUs · John Allen <john.allen@amd.com> · 2022-02-04
[PATCH 27/35] x86/fpu: Add unsafe xsave buffer helpers · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 24/35] mm: Re-introduce vm_flags to do_mmap() · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
[PATCH 28/35] x86/cet/shstk: Handle thread shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2022-01-30
Re: [PATCH 00/35] Shadow stacks for userspace · Thomas Gleixner <hidden> · 2022-02-03
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-04
Re: [PATCH 00/35] Shadow stacks for userspace · "Andy Lutomirski" <luto@kernel.org> · 2022-02-04
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-04
RE: [PATCH 00/35] Shadow stacks for userspace · David Laight <hidden> · 2022-02-05
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-02-05
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-05
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-02-05
Re: [PATCH 00/35] Shadow stacks for userspace · Peter Zijlstra <peterz@infradead.org> · 2022-02-06
RE: [PATCH 00/35] Shadow stacks for userspace · David Laight <hidden> · 2022-02-06
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-02-06
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · Andy Lutomirski <luto@kernel.org> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · Thomas Gleixner <hidden> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · "Andy Lutomirski" <luto@kernel.org> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · Peter Zijlstra <peterz@infradead.org> · 2022-02-06
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-02-06
Re: [PATCH 00/35] Shadow stacks for userspace · Adrian Reber <hidden> · 2022-02-07
Re: [PATCH 00/35] Shadow stacks for userspace · Dave Hansen <hidden> · 2022-02-07
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · Cyrill Gorcunov <hidden> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · "Andy Lutomirski" <luto@kernel.org> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · Cyrill Gorcunov <hidden> · 2022-02-08
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-02-09
Re: [PATCH 00/35] Shadow stacks for userspace · Cyrill Gorcunov <hidden> · 2022-02-09
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-02-09
Re: [PATCH 00/35] Shadow stacks for userspace · Andy Lutomirski <luto@kernel.org> · 2022-02-10
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-02-10
RE: [PATCH 00/35] Shadow stacks for userspace · Willgerodt, Felix <hidden> · 2022-02-10
Re: [PATCH 00/35] Shadow stacks for userspace · avagin@gmail.com <hidden> · 2022-02-11
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-02-11
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-02-28
Re: [PATCH 00/35] Shadow stacks for userspace · "Andy Lutomirski" <luto@kernel.org> · 2022-02-28
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-02-28
Re: [PATCH 00/35] Shadow stacks for userspace · "Andy Lutomirski" <luto@kernel.org> · 2022-02-28
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-03-03
Re: [PATCH 00/35] Shadow stacks for userspace · Andy Lutomirski <luto@kernel.org> · 2022-03-03
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-03-04
Re: [PATCH 00/35] Shadow stacks for userspace · Andy Lutomirski <luto@kernel.org> · 2022-03-04
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-03-07
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-03-07
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-05-31
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-05-31
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-05-31
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-05-31
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-05-31
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-06-01
Re: [PATCH 00/35] Shadow stacks for userspace · H.J. Lu <hidden> · 2022-06-01
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-06-01
Re: [PATCH 00/35] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2022-06-01
Re: [PATCH 00/35] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2022-06-09
RE: [PATCH 00/35] Shadow stacks for userspace · David Laight <hidden> · 2022-03-07

From: Peter Zijlstra <peterz@infradead.org>
Date: 2022-02-06 13:20:14
Also in: linux-arch, linux-doc, linux-mm, lkml

On Sat, Feb 05, 2022 at 12:21:12PM -0800, H.J. Lu wrote:

setjmp/longjmp work on the same sigjmp_buf.  Shadow stack pointer
is saved and restored, just like any other callee-saved registers.

How is having that shadow stack pointer in user-writable memory not a
problem? That seems like a prime target to subvert the whole shadow
stack machinery.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help