mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2025-01-08 14:13:53 +00:00
75cf029027
To avoid false positives, KMSAN needs to unpoison the data copied from the userspace. To detect infoleaks - check the memory buffer passed to copy_to_user(). Link: https://lkml.kernel.org/r/20220915150417.722975-19-glider@google.com Signed-off-by: Alexander Potapenko <glider@google.com> Reviewed-by: Marco Elver <elver@google.com> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: Alexei Starovoitov <ast@kernel.org> Cc: Andrey Konovalov <andreyknvl@gmail.com> Cc: Andrey Konovalov <andreyknvl@google.com> Cc: Andy Lutomirski <luto@kernel.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Borislav Petkov <bp@alien8.de> Cc: Christoph Hellwig <hch@lst.de> Cc: Christoph Lameter <cl@linux.com> Cc: David Rientjes <rientjes@google.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Eric Biggers <ebiggers@google.com> Cc: Eric Biggers <ebiggers@kernel.org> Cc: Eric Dumazet <edumazet@google.com> Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Herbert Xu <herbert@gondor.apana.org.au> Cc: Ilya Leoshkevich <iii@linux.ibm.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Jens Axboe <axboe@kernel.dk> Cc: Joonsoo Kim <iamjoonsoo.kim@lge.com> Cc: Kees Cook <keescook@chromium.org> Cc: Mark Rutland <mark.rutland@arm.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Michael S. Tsirkin <mst@redhat.com> Cc: Pekka Enberg <penberg@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Petr Mladek <pmladek@suse.com> Cc: Stephen Rothwell <sfr@canb.auug.org.au> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: Vasily Gorbik <gor@linux.ibm.com> Cc: Vegard Nossum <vegard.nossum@oracle.com> Cc: Vlastimil Babka <vbabka@suse.cz> Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
193 lines
5.2 KiB
C
193 lines
5.2 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
|
|
/*
|
|
* This header provides generic wrappers for memory access instrumentation that
|
|
* the compiler cannot emit for: KASAN, KCSAN, KMSAN.
|
|
*/
|
|
#ifndef _LINUX_INSTRUMENTED_H
|
|
#define _LINUX_INSTRUMENTED_H
|
|
|
|
#include <linux/compiler.h>
|
|
#include <linux/kasan-checks.h>
|
|
#include <linux/kcsan-checks.h>
|
|
#include <linux/kmsan-checks.h>
|
|
#include <linux/types.h>
|
|
|
|
/**
|
|
* instrument_read - instrument regular read access
|
|
*
|
|
* Instrument a regular read access. The instrumentation should be inserted
|
|
* before the actual read happens.
|
|
*
|
|
* @ptr address of access
|
|
* @size size of access
|
|
*/
|
|
static __always_inline void instrument_read(const volatile void *v, size_t size)
|
|
{
|
|
kasan_check_read(v, size);
|
|
kcsan_check_read(v, size);
|
|
}
|
|
|
|
/**
|
|
* instrument_write - instrument regular write access
|
|
*
|
|
* Instrument a regular write access. The instrumentation should be inserted
|
|
* before the actual write happens.
|
|
*
|
|
* @ptr address of access
|
|
* @size size of access
|
|
*/
|
|
static __always_inline void instrument_write(const volatile void *v, size_t size)
|
|
{
|
|
kasan_check_write(v, size);
|
|
kcsan_check_write(v, size);
|
|
}
|
|
|
|
/**
|
|
* instrument_read_write - instrument regular read-write access
|
|
*
|
|
* Instrument a regular write access. The instrumentation should be inserted
|
|
* before the actual write happens.
|
|
*
|
|
* @ptr address of access
|
|
* @size size of access
|
|
*/
|
|
static __always_inline void instrument_read_write(const volatile void *v, size_t size)
|
|
{
|
|
kasan_check_write(v, size);
|
|
kcsan_check_read_write(v, size);
|
|
}
|
|
|
|
/**
|
|
* instrument_atomic_read - instrument atomic read access
|
|
*
|
|
* Instrument an atomic read access. The instrumentation should be inserted
|
|
* before the actual read happens.
|
|
*
|
|
* @ptr address of access
|
|
* @size size of access
|
|
*/
|
|
static __always_inline void instrument_atomic_read(const volatile void *v, size_t size)
|
|
{
|
|
kasan_check_read(v, size);
|
|
kcsan_check_atomic_read(v, size);
|
|
}
|
|
|
|
/**
|
|
* instrument_atomic_write - instrument atomic write access
|
|
*
|
|
* Instrument an atomic write access. The instrumentation should be inserted
|
|
* before the actual write happens.
|
|
*
|
|
* @ptr address of access
|
|
* @size size of access
|
|
*/
|
|
static __always_inline void instrument_atomic_write(const volatile void *v, size_t size)
|
|
{
|
|
kasan_check_write(v, size);
|
|
kcsan_check_atomic_write(v, size);
|
|
}
|
|
|
|
/**
|
|
* instrument_atomic_read_write - instrument atomic read-write access
|
|
*
|
|
* Instrument an atomic read-write access. The instrumentation should be
|
|
* inserted before the actual write happens.
|
|
*
|
|
* @ptr address of access
|
|
* @size size of access
|
|
*/
|
|
static __always_inline void instrument_atomic_read_write(const volatile void *v, size_t size)
|
|
{
|
|
kasan_check_write(v, size);
|
|
kcsan_check_atomic_read_write(v, size);
|
|
}
|
|
|
|
/**
|
|
* instrument_copy_to_user - instrument reads of copy_to_user
|
|
*
|
|
* Instrument reads from kernel memory, that are due to copy_to_user (and
|
|
* variants). The instrumentation must be inserted before the accesses.
|
|
*
|
|
* @to destination address
|
|
* @from source address
|
|
* @n number of bytes to copy
|
|
*/
|
|
static __always_inline void
|
|
instrument_copy_to_user(void __user *to, const void *from, unsigned long n)
|
|
{
|
|
kasan_check_read(from, n);
|
|
kcsan_check_read(from, n);
|
|
kmsan_copy_to_user(to, from, n, 0);
|
|
}
|
|
|
|
/**
|
|
* instrument_copy_from_user_before - add instrumentation before copy_from_user
|
|
*
|
|
* Instrument writes to kernel memory, that are due to copy_from_user (and
|
|
* variants). The instrumentation should be inserted before the accesses.
|
|
*
|
|
* @to destination address
|
|
* @from source address
|
|
* @n number of bytes to copy
|
|
*/
|
|
static __always_inline void
|
|
instrument_copy_from_user_before(const void *to, const void __user *from, unsigned long n)
|
|
{
|
|
kasan_check_write(to, n);
|
|
kcsan_check_write(to, n);
|
|
}
|
|
|
|
/**
|
|
* instrument_copy_from_user_after - add instrumentation after copy_from_user
|
|
*
|
|
* Instrument writes to kernel memory, that are due to copy_from_user (and
|
|
* variants). The instrumentation should be inserted after the accesses.
|
|
*
|
|
* @to destination address
|
|
* @from source address
|
|
* @n number of bytes to copy
|
|
* @left number of bytes not copied (as returned by copy_from_user)
|
|
*/
|
|
static __always_inline void
|
|
instrument_copy_from_user_after(const void *to, const void __user *from,
|
|
unsigned long n, unsigned long left)
|
|
{
|
|
kmsan_unpoison_memory(to, n - left);
|
|
}
|
|
|
|
/**
|
|
* instrument_get_user() - add instrumentation to get_user()-like macros
|
|
*
|
|
* get_user() and friends are fragile, so it may depend on the implementation
|
|
* whether the instrumentation happens before or after the data is copied from
|
|
* the userspace.
|
|
*
|
|
* @to destination variable, may not be address-taken
|
|
*/
|
|
#define instrument_get_user(to) \
|
|
({ \
|
|
u64 __tmp = (u64)(to); \
|
|
kmsan_unpoison_memory(&__tmp, sizeof(__tmp)); \
|
|
to = __tmp; \
|
|
})
|
|
|
|
|
|
/**
|
|
* instrument_put_user() - add instrumentation to put_user()-like macros
|
|
*
|
|
* put_user() and friends are fragile, so it may depend on the implementation
|
|
* whether the instrumentation happens before or after the data is copied from
|
|
* the userspace.
|
|
*
|
|
* @from source address
|
|
* @ptr userspace pointer to copy to
|
|
* @size number of bytes to copy
|
|
*/
|
|
#define instrument_put_user(from, ptr, size) \
|
|
({ \
|
|
kmsan_copy_to_user(ptr, &from, sizeof(from), 0); \
|
|
})
|
|
|
|
#endif /* _LINUX_INSTRUMENTED_H */
|