[PATCH v6 00/18] khwasan: kernel hardware assisted address sanitizer
From: Nick Desaulniers <hidden>
Date: 2018-09-06 16:40:06
Also in:
linux-doc, linux-kbuild, linux-mm, lkml
On Thu, Sep 6, 2018 at 4:06 AM Andrey Konovalov [off-list ref] wrote:
On Thu, Sep 6, 2018 at 12:05 PM, Will Deacon [off-list ref] wrote:quoted
On Wed, Sep 05, 2018 at 02:10:32PM -0700, Andrew Morton wrote:quoted
On Wed, 29 Aug 2018 13:35:04 +0200 Andrey Konovalov [off-list ref] wrote:quoted
This patchset adds a new mode to KASAN [1], which is called KHWASAN (Kernel HardWare assisted Address SANitizer).We're at v6 and there are no reviewed-by's or acked-by's to be seen. Is that a fair commentary on what has been happening, or have people been remiss in sending and gathering such things?I still have concerns about the consequences of merging this as anything other than a debug option [1]. Unfortunately, merging it as a debug option defeats the whole point, so I think we need to spend more effort on developing tools that can help us to find and fix the subtle bugs which will arise from enabling tagged pointers in the kernel.I totally don't mind calling it a debug option. Do I need to somehow specify it somewhere? Why does it defeat the point? The point is to ease KASAN-like testing on devices with limited memory.
I don't disagree with using it strictly for debug. When I say I want the series for Pixel phones, I should have been clearer that my intent is for a limited pool of internal testers to walk around with KHWASAN enabled devices; not general end users. It's hard enough today to get anyone to test KASAN/ASAN on their "daily driver" due to the memory usage and resulting performance. We don't ship KASAN or KUBSAN on by default to end users (nor plan to); it's used strictly for fuzzing through syzkaller (or by brave "dogfooders" on the internal kernel teams). KHWASAN would let these dogfooders go from being brave to fearless. -- Thanks, ~Nick Desaulniers