Sami Tolvanen 42633ed852 kbuild: Fix CFI hash randomization with KASAN ... Clang emits a asan.module_ctor constructor to each object file when KASAN is enabled, and these functions are indirectly called in do_ctors. With CONFIG_CFI_CLANG, the compiler also emits a CFI type hash before each address-taken global function so they can pass indirect call checks. However, in commit 0c3e806ec0 ("x86/cfi: Add boot time hash randomization"), x86 implemented boot time hash randomization, which relies on the .cfi_sites section generated by objtool. As objtool is run against vmlinux.o instead of individual object files with X86_KERNEL_IBT (enabled by default), CFI types in object files that are not part of vmlinux.o end up not being included in .cfi_sites, and thus won't get randomized and trip CFI when called. Only .vmlinux.export.o and init/version-timestamp.o are linked into vmlinux separately from vmlinux.o. As these files don't contain any functions, disable KASAN for both of them to avoid breaking hash randomization. Link: https://github.com/ClangBuiltLinux/linux/issues/1742 Fixes: 0c3e806ec0 ("x86/cfi: Add boot time hash randomization") Signed-off-by: Sami Tolvanen <samitolvanen@google.com> Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20230112224948.1479453-2-samitolvanen@google.com		2023-01-13 15:22:03 -08:00
..
.gitignore	kbuild: build init/built-in.a just once	2022-09-29 04:40:15 +09:00
build-version	kbuild: build init/built-in.a just once	2022-09-29 04:40:15 +09:00
calibrate.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
do_mounts_initrd.c	freezer,umh: Clean up freezer/initrd interaction	2022-09-07 21:53:48 +02:00
do_mounts_rd.c	init: add an init_unlink helper	2020-07-31 08:17:52 +02:00
do_mounts.c	init: move from strlcpy with unused retval to strscpy	2022-09-11 21:55:10 -07:00
do_mounts.h	init: add an init_mknod helper	2020-07-31 08:17:54 +02:00
init_task.c	rcu-tasks: Add data structures for lightweight grace periods	2022-06-20 09:22:28 -07:00
initramfs.c	initramfs: remove unnecessary (void*) conversion	2022-11-18 13:55:08 -08:00
Kconfig	hardening updates for v6.2-rc1	2022-12-14 12:20:00 -08:00
main.c	New Feature:	2022-12-17 14:06:53 -06:00
Makefile	kbuild: Fix CFI hash randomization with KASAN	2023-01-13 15:22:03 -08:00
noinitramfs.c	init: move usermodehelper_enable() to populate_rootfs()	2021-09-08 11:50:27 -07:00
version-timestamp.c	kbuild: build init/built-in.a just once	2022-09-29 04:40:15 +09:00
version.c	init/version.c: remove #include <generated/utsrelease.h>	2022-12-10 10:33:20 +09:00