mirror of
https://github.com/torvalds/linux.git
synced 2024-12-18 00:53:40 +00:00
d17b664173
With KCFLAGS="-O3", I was able to trigger a fortify-source memcpy() overflow panic on set_vi_srs_handler(). Although O3 level is not supported in the mainline, under some conditions that may've happened with any optimization settings, it's just a matter of inlining luck. The panic itself is correct, more precisely, 50/50 false-positive and not at the same time. From the one side, no real overflow happens. Exception handler defined in asm just gets copied to some reserved places in the memory. But the reason behind is that C code refers to that exception handler declares it as `char`, i.e. something of 1 byte length. It's obvious that the asm function itself is way more than 1 byte, so fortify logics thought we are going to past the symbol declared. The standard way to refer to asm symbols from C code which is not supposed to be called from C is to declare them as `extern const u8[]`. This is fully correct from any point of view, as any code itself is just a bunch of bytes (including 0 as it is for syms like _stext/_etext/etc.), and the exact size is not known at the moment of compilation. Adjust the type of the except_vec_vi_*() and related variables. Make set_handler() take `const` as a second argument to avoid cast-away warnings and give a little more room for optimization. Signed-off-by: Alexander Lobakin <alobakin@pm.me> Signed-off-by: Thomas Bogendoerfer <tsbogend@alpha.franken.de> |
||
|---|---|---|
| .. | ||
| alchemy | ||
| ar7 | ||
| ath25 | ||
| ath79 | ||
| bcm47xx | ||
| bcm63xx | ||
| bmips | ||
| boot | ||
| cavium-octeon | ||
| cobalt | ||
| configs | ||
| crypto | ||
| dec | ||
| fw | ||
| generic | ||
| include | ||
| ingenic | ||
| jazz | ||
| kernel | ||
| kvm | ||
| lantiq | ||
| lib | ||
| loongson2ef | ||
| loongson32 | ||
| loongson64 | ||
| math-emu | ||
| mm | ||
| mti-malta | ||
| n64 | ||
| net | ||
| pci | ||
| pic32 | ||
| power | ||
| ralink | ||
| rb532 | ||
| sgi-ip22 | ||
| sgi-ip27 | ||
| sgi-ip30 | ||
| sgi-ip32 | ||
| sibyte | ||
| sni | ||
| tools | ||
| txx9 | ||
| vdso | ||
| vr41xx | ||
| Kbuild | ||
| Kbuild.platforms | ||
| Kconfig | ||
| Kconfig.debug | ||
| Makefile | ||
| Makefile.postlink | ||