diff mbox series

[PATCHv2,02/14] fork: allow arch-override of VMAP stack alignment

Message ID 1502801449-29246-3-git-send-email-mark.rutland@arm.com
State New
Headers show
Series arm64: VMAP_STACK support | expand

Commit Message

Mark Rutland Aug. 15, 2017, 12:50 p.m. UTC
In some cases, an architecture might wish its stacks to be aligned to a
boundary larger than THREAD_SIZE. For example, using an alignment of
double THREAD_SIZE can allow for stack overflows smaller than
THREAD_SIZE to be detected by checking a single bit of the stack
pointer.

This patch allows architectures to override the alignment of VMAP'd
stacks, by defining THREAD_ALIGN. Where not defined, this defaults to
THREAD_SIZE, as is the case today.

Signed-off-by: Mark Rutland <mark.rutland@arm.com>

Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: James Morse <james.morse@arm.com>
Cc: Laura Abbott <labbott@redhat.com>
Cc: Will Deacon <will.deacon@arm.com>
Cc: linux-kernel@vger.kernel.org
---
 kernel/fork.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

-- 
1.9.1

Comments

Andy Lutomirski Aug. 15, 2017, 4:09 p.m. UTC | #1
On Tue, Aug 15, 2017 at 5:50 AM, Mark Rutland <mark.rutland@arm.com> wrote:
> In some cases, an architecture might wish its stacks to be aligned to a

> boundary larger than THREAD_SIZE. For example, using an alignment of

> double THREAD_SIZE can allow for stack overflows smaller than

> THREAD_SIZE to be detected by checking a single bit of the stack

> pointer.

>

> This patch allows architectures to override the alignment of VMAP'd

> stacks, by defining THREAD_ALIGN. Where not defined, this defaults to

> THREAD_SIZE, as is the case today.


This looks okay, but it might make sense to move that to a header file
so THREAD_ALIGN is always available.

>

> Signed-off-by: Mark Rutland <mark.rutland@arm.com>

> Cc: Andy Lutomirski <luto@amacapital.net>

> Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>

> Cc: Catalin Marinas <catalin.marinas@arm.com>

> Cc: James Morse <james.morse@arm.com>

> Cc: Laura Abbott <labbott@redhat.com>

> Cc: Will Deacon <will.deacon@arm.com>

> Cc: linux-kernel@vger.kernel.org

> ---

>  kernel/fork.c | 5 ++++-

>  1 file changed, 4 insertions(+), 1 deletion(-)

>

> diff --git a/kernel/fork.c b/kernel/fork.c

> index 17921b0..696d692 100644

> --- a/kernel/fork.c

> +++ b/kernel/fork.c

> @@ -217,7 +217,10 @@ static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)

>                 return s->addr;

>         }

>

> -       stack = __vmalloc_node_range(THREAD_SIZE, THREAD_SIZE,

> +#ifndef THREAD_ALIGN

> +#define THREAD_ALIGN   THREAD_SIZE

> +#endif

> +       stack = __vmalloc_node_range(THREAD_SIZE, THREAD_ALIGN,

>                                      VMALLOC_START, VMALLOC_END,

>                                      THREADINFO_GFP,

>                                      PAGE_KERNEL,

> --

> 1.9.1

>




-- 
Andy Lutomirski
AMA Capital Management, LLC
Mark Rutland Aug. 15, 2017, 4:30 p.m. UTC | #2
On Tue, Aug 15, 2017 at 09:09:36AM -0700, Andy Lutomirski wrote:
> On Tue, Aug 15, 2017 at 5:50 AM, Mark Rutland <mark.rutland@arm.com> wrote:

> > In some cases, an architecture might wish its stacks to be aligned to a

> > boundary larger than THREAD_SIZE. For example, using an alignment of

> > double THREAD_SIZE can allow for stack overflows smaller than

> > THREAD_SIZE to be detected by checking a single bit of the stack

> > pointer.

> >

> > This patch allows architectures to override the alignment of VMAP'd

> > stacks, by defining THREAD_ALIGN. Where not defined, this defaults to

> > THREAD_SIZE, as is the case today.

> 

> This looks okay, but it might make sense to move that to a header file

> so THREAD_ALIGN is always available.


I was a little worried about breaking things, since arches don't define
THREAD_SIZE in a consistent location.

Looking again, it looks like those are all transitiviely included into
each arch's <asm/thread_info.h>, so I think I can move this into
<linux/thread_info.h>, which'll have to be added to kernel.fork.c's
includes.

Are you happy with the below fixup?

Thanks,
Mark.

---->8----diff --git a/include/linux/thread_info.h b/include/linux/thread_info.h
index 250a276..905d769 100644
--- a/include/linux/thread_info.h
+++ b/include/linux/thread_info.h
@@ -38,6 +38,10 @@ enum {
 
 #ifdef __KERNEL__
 
+#ifndef THREAD_ALIGN
+#define THREAD_ALIGN   THREAD_SIZE
+#endif
+
 #ifdef CONFIG_DEBUG_STACK_USAGE
 # define THREADINFO_GFP                (GFP_KERNEL_ACCOUNT | __GFP_NOTRACK | \
                                 __GFP_ZERO)
diff --git a/kernel/fork.c b/kernel/fork.c
index 696d692..f12882a 100644
--- a/kernel/fork.c
+++ b/kernel/fork.c
@@ -88,6 +88,7 @@
 #include <linux/sysctl.h>
 #include <linux/kcov.h>
 #include <linux/livepatch.h>
+#include <linux/thread_info.h>
 
 #include <asm/pgtable.h>
 #include <asm/pgalloc.h>
@@ -217,9 +218,6 @@ static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
                return s->addr;
        }
 
-#ifndef THREAD_ALIGN
-#define THREAD_ALIGN   THREAD_SIZE
-#endif
        stack = __vmalloc_node_range(THREAD_SIZE, THREAD_ALIGN,
                                     VMALLOC_START, VMALLOC_END,
                                     THREADINFO_GFP,

Andy Lutomirski Aug. 15, 2017, 4:33 p.m. UTC | #3
On Tue, Aug 15, 2017 at 9:30 AM, Mark Rutland <mark.rutland@arm.com> wrote:
> On Tue, Aug 15, 2017 at 09:09:36AM -0700, Andy Lutomirski wrote:

>> On Tue, Aug 15, 2017 at 5:50 AM, Mark Rutland <mark.rutland@arm.com> wrote:

>> > In some cases, an architecture might wish its stacks to be aligned to a

>> > boundary larger than THREAD_SIZE. For example, using an alignment of

>> > double THREAD_SIZE can allow for stack overflows smaller than

>> > THREAD_SIZE to be detected by checking a single bit of the stack

>> > pointer.

>> >

>> > This patch allows architectures to override the alignment of VMAP'd

>> > stacks, by defining THREAD_ALIGN. Where not defined, this defaults to

>> > THREAD_SIZE, as is the case today.

>>

>> This looks okay, but it might make sense to move that to a header file

>> so THREAD_ALIGN is always available.

>

> I was a little worried about breaking things, since arches don't define

> THREAD_SIZE in a consistent location.

>

> Looking again, it looks like those are all transitiviely included into

> each arch's <asm/thread_info.h>, so I think I can move this into

> <linux/thread_info.h>, which'll have to be added to kernel.fork.c's

> includes.

>

> Are you happy with the below fixup?


LGTM.

>

> Thanks,

> Mark.

>

> ---->8----

> diff --git a/include/linux/thread_info.h b/include/linux/thread_info.h

> index 250a276..905d769 100644

> --- a/include/linux/thread_info.h

> +++ b/include/linux/thread_info.h

> @@ -38,6 +38,10 @@ enum {

>

>  #ifdef __KERNEL__

>

> +#ifndef THREAD_ALIGN

> +#define THREAD_ALIGN   THREAD_SIZE

> +#endif

> +

>  #ifdef CONFIG_DEBUG_STACK_USAGE

>  # define THREADINFO_GFP                (GFP_KERNEL_ACCOUNT | __GFP_NOTRACK | \

>                                  __GFP_ZERO)

> diff --git a/kernel/fork.c b/kernel/fork.c

> index 696d692..f12882a 100644

> --- a/kernel/fork.c

> +++ b/kernel/fork.c

> @@ -88,6 +88,7 @@

>  #include <linux/sysctl.h>

>  #include <linux/kcov.h>

>  #include <linux/livepatch.h>

> +#include <linux/thread_info.h>

>

>  #include <asm/pgtable.h>

>  #include <asm/pgalloc.h>

> @@ -217,9 +218,6 @@ static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)

>                 return s->addr;

>         }

>

> -#ifndef THREAD_ALIGN

> -#define THREAD_ALIGN   THREAD_SIZE

> -#endif

>         stack = __vmalloc_node_range(THREAD_SIZE, THREAD_ALIGN,

>                                      VMALLOC_START, VMALLOC_END,

>                                      THREADINFO_GFP,

>




-- 
Andy Lutomirski
AMA Capital Management, LLC
Mark Rutland Aug. 15, 2017, 4:39 p.m. UTC | #4
On Tue, Aug 15, 2017 at 09:33:18AM -0700, Andy Lutomirski wrote:
> On Tue, Aug 15, 2017 at 9:30 AM, Mark Rutland <mark.rutland@arm.com> wrote:

> > On Tue, Aug 15, 2017 at 09:09:36AM -0700, Andy Lutomirski wrote:


> >> This looks okay, but it might make sense to move that to a header file

> >> so THREAD_ALIGN is always available.

> >

> > I was a little worried about breaking things, since arches don't define

> > THREAD_SIZE in a consistent location.

> >

> > Looking again, it looks like those are all transitiviely included into

> > each arch's <asm/thread_info.h>, so I think I can move this into

> > <linux/thread_info.h>, which'll have to be added to kernel.fork.c's

> > includes.

> >

> > Are you happy with the below fixup?

> 

> LGTM.


Cool. I've folded that in and pushed the updated branch.

Thanks,
Mark.
Catalin Marinas Aug. 15, 2017, 5:02 p.m. UTC | #5
On Tue, Aug 15, 2017 at 05:39:55PM +0100, Mark Rutland wrote:
> On Tue, Aug 15, 2017 at 09:33:18AM -0700, Andy Lutomirski wrote:

> > On Tue, Aug 15, 2017 at 9:30 AM, Mark Rutland <mark.rutland@arm.com> wrote:

> > > On Tue, Aug 15, 2017 at 09:09:36AM -0700, Andy Lutomirski wrote:

> 

> > >> This looks okay, but it might make sense to move that to a header file

> > >> so THREAD_ALIGN is always available.

> > >

> > > I was a little worried about breaking things, since arches don't define

> > > THREAD_SIZE in a consistent location.

> > >

> > > Looking again, it looks like those are all transitiviely included into

> > > each arch's <asm/thread_info.h>, so I think I can move this into

> > > <linux/thread_info.h>, which'll have to be added to kernel.fork.c's

> > > includes.

> > >

> > > Are you happy with the below fixup?

> > 

> > LGTM.

> 

> Cool. I've folded that in and pushed the updated branch.


I pulled the branch for 4.14. Thanks.

-- 
Catalin
diff mbox series

Patch

diff --git a/kernel/fork.c b/kernel/fork.c
index 17921b0..696d692 100644
--- a/kernel/fork.c
+++ b/kernel/fork.c
@@ -217,7 +217,10 @@  static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
 		return s->addr;
 	}
 
-	stack = __vmalloc_node_range(THREAD_SIZE, THREAD_SIZE,
+#ifndef THREAD_ALIGN
+#define THREAD_ALIGN	THREAD_SIZE
+#endif
+	stack = __vmalloc_node_range(THREAD_SIZE, THREAD_ALIGN,
 				     VMALLOC_START, VMALLOC_END,
 				     THREADINFO_GFP,
 				     PAGE_KERNEL,