mbox series

[0/2] fortify: Add run-time WARN for cross-field memcpy()

Message ID 20220901065914.1417829-1-keescook@chromium.org
Headers show
Series fortify: Add run-time WARN for cross-field memcpy() | expand

Message

Kees Cook Sept. 1, 2022, 6:59 a.m. UTC 
Hi,

I'm hoping to at least get this into -next to see how noisy it ends up
being. I've tracked down several false positives that are getting fixed,
but I'd like to see this get wider testing. For details, see patch 1,
but this is the run-time half of the recent FORTIFY_SOURCE memcpy()
bounds checking work.

-Kees

Kees Cook (2):
  fortify: Add run-time WARN for cross-field memcpy()
  lkdtm: Update tests for memcpy() run-time warnings

 drivers/misc/lkdtm/fortify.c            | 96 +++++++++++++++++++++----
 include/linux/fortify-string.h          | 70 +++++++++++++++++-
 tools/testing/selftests/lkdtm/tests.txt |  8 ++-
 3 files changed, 155 insertions(+), 19 deletions(-)