From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pg0-f72.google.com (mail-pg0-f72.google.com [74.125.83.72]) by kanga.kvack.org (Postfix) with ESMTP id 910B56B025F for ; Sat, 12 Aug 2017 07:57:45 -0400 (EDT) Received: by mail-pg0-f72.google.com with SMTP id y192so62642464pgd.12 for ; Sat, 12 Aug 2017 04:57:45 -0700 (PDT) Received: from foss.arm.com (usa-sjc-mx-foss1.foss.arm.com. [217.140.101.70]) by mx.google.com with ESMTP id 94si1864186pld.1034.2017.08.12.04.57.43 for ; Sat, 12 Aug 2017 04:57:44 -0700 (PDT) Date: Sat, 12 Aug 2017 12:57:37 +0100 From: Mark Rutland Subject: Re: [kernel-hardening] [PATCH v5 07/10] arm64/mm: Don't flush the data cache if the page is unmapped by XPFO Message-ID: <20170812115736.GC16374@remoulade> References: <20170809200755.11234-1-tycho@docker.com> <20170809200755.11234-8-tycho@docker.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20170809200755.11234-8-tycho@docker.com> Sender: owner-linux-mm@kvack.org List-ID: To: Tycho Andersen Cc: linux-kernel@vger.kernel.org, linux-mm@kvack.org, kernel-hardening@lists.openwall.com, Marco Benatto , Juerg Haefliger , Juerg Haefliger On Wed, Aug 09, 2017 at 02:07:52PM -0600, Tycho Andersen wrote: > From: Juerg Haefliger > > If the page is unmapped by XPFO, a data cache flush results in a fatal > page fault. So don't flush in that case. Do you have an example callchain where that happens? We might need to shuffle things around to cater for that case. > @@ -30,7 +31,9 @@ void sync_icache_aliases(void *kaddr, unsigned long len) > unsigned long addr = (unsigned long)kaddr; > > if (icache_is_aliasing()) { > - __clean_dcache_area_pou(kaddr, len); > + /* Don't flush if the page is unmapped by XPFO */ > + if (!xpfo_page_is_unmapped(virt_to_page(kaddr))) > + __clean_dcache_area_pou(kaddr, len); > __flush_icache_all(); > } else { > flush_icache_range(addr, addr + len); I don't think this patch is correct. If data cache maintenance is required in the absence of XPFO, I don't see why it wouldn't be required in the presence of XPFO. I'm not immediately sure why the non-aliasing case misses data cache maintenance. I couldn't spot where that happens otherwise. On a more general note, in future it would be good to Cc the arm64 maintainers and the linux-arm-kernel mailing list for patches affecting arm64. Thanks, Mark. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org