Thread (4 messages) 4 messages, 2 authors, 2021-06-22

Re: [PATCH] kasan: [v2]unpoison use memzero to init unaligned object

From: Yee Lee <hidden>
Date: 2021-06-22 10:48:21
Also in: linux-mediatek, linux-mm, lkml

On Tue, 2021-06-22 at 11:01 +0200, Marco Elver wrote:
On Tue, 22 Jun 2021 at 10:48, [off-list ref] wrote:
quoted
From: Yee Lee <redacted>

Follows the discussion: 
https://patchwork.kernel.org/project/linux-mediatek/list/?series=504439
The info about the percentage of how frequent this is could have been
provided as a simple reply to the discussion.
quoted
This patch Add memzero_explict to initialize unaligned object.
This patch does not apply to anything (I see it depends on the
previous patch).

What you need to do is modify the original patch, and then send a
[PATCH v2] (git helps with that by passing --reroll-count or -v) that
applies cleanly to your base kernel tree.

The commit message will usually end with '---' and then briefly
denote
what changed since the last version.
Got it.
https://www.kernel.org/doc/html/latest/process/submitting-patches.html#the-canonical-patch-format
quoted
Based on the integrateion of initialization in kasan_unpoison().
The hwtag instructions, constrained with its granularity, has to
overwrite the data btyes in unaligned objects. This would cause
issue when it works with SLUB debug redzoning.

In this patch, an additional initalizaing path is added for the
unaligned objects. It contains memzero_explict() to clear out the
data and disables its init flag for the following hwtag actions.

In lab test, this path is executed about 1.1%(941/80854) within the
overall kasan_unpoison during a non-debug booting process.
Nice, thanks for the data. If it is somehow doable, however, I'd
still
recommend to additionally guard the new code path by a check if
debug-support was requested. Ideally with an IS_ENABLED() config
check
so that if it's a production kernel the branch is simply optimized
out
by the compiler.
Does it mean the memzero code path would be applied only at
CONFIG_DEBUG_SLUB enabled? It expects no other potential overwriting
in non-debug kernel.
 
By the way, based on de-coupling principle, adding a specific
conditional statement(is_enable slub_debug) in a primitive
funciton(kasan_unpoison) is not neat. It may be more proper that the
conditional statement be added in other procedures of slub alloc.
 
Thanks,

BR,
Yee
quoted
Lab test: QEMU5.2 (+mte) / linux kernel 5.13-rc7

Signed-off-by: Yee Lee <redacted>
---
 mm/kasan/kasan.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/mm/kasan/kasan.h b/mm/kasan/kasan.h
index d8faa64614b7..edc11bcc3ff3 100644
--- a/mm/kasan/kasan.h
+++ b/mm/kasan/kasan.h
@@ -389,7 +389,7 @@ static inline void kasan_unpoison(const void
*addr, size_t size, bool init)
                return;
        if (init && ((unsigned long)size & KASAN_GRANULE_MASK)) {
                init = false;
-               memset((void *)addr, 0, size);
+               memzero_explicit((void *)addr, size);
        }
        size = round_up(size, KASAN_GRANULE_SIZE);
        hw_set_mem_tag_range((void *)addr, size, tag, init);
2.18.0

--
You received this message because you are subscribed to the Google
Groups "kasan-dev" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to kasan-dev+unsubscribe@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/kasan-dev/20210622084723.27637-1-yee.lee%40mediatek.com
.
_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help