From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 40844C4332F for ; Thu, 6 Oct 2022 23:37:21 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id C3D5B8E0001; Thu, 6 Oct 2022 19:37:20 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id BC5646B0073; Thu, 6 Oct 2022 19:37:20 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 9F01C8E0001; Thu, 6 Oct 2022 19:37:20 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0014.hostedemail.com [216.40.44.14]) by kanga.kvack.org (Postfix) with ESMTP id 794506B0072 for ; Thu, 6 Oct 2022 19:37:20 -0400 (EDT) Received: from smtpin27.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay03.hostedemail.com (Postfix) with ESMTP id 3C377A093D for ; Thu, 6 Oct 2022 23:37:20 +0000 (UTC) X-FDA: 79992138240.27.3584403 Received: from ams.source.kernel.org (ams.source.kernel.org [145.40.68.75]) by imf25.hostedemail.com (Postfix) with ESMTP id 398F1A0017 for ; Thu, 6 Oct 2022 23:37:18 +0000 (UTC) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ams.source.kernel.org (Postfix) with ESMTPS id 745C2B821E1 for ; Thu, 6 Oct 2022 23:37:15 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id E8669C433C1 for ; Thu, 6 Oct 2022 23:37:14 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zx2c4.com; s=20210105; t=1665099425; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=eDWvYu+uSvuLU1D2yrcps4Uxg3s4afpQR1DZP1HAENk=; b=TcHt+d7yPueTBYuwAAWxgvAdDHj64m9UG6PsgMMVrRyZJdh3MrfBnD2EXuRBSXN2AK0bce JQq/oT07fufzIxmebswTUezyu6iYB1SPu/a1sYeOsQdbYBA7W/PLHN/kvsFnjOB3CrTBCb jkr+TVwHNLRv1VXqfp1j0nzqaza9BYA= Received: by mail.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id c0e4c048 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) for ; Thu, 6 Oct 2022 23:37:05 +0000 (UTC) Received: by mail-pj1-f48.google.com with SMTP id e11-20020a17090a77cb00b00205edbfd646so5746339pjs.1 for ; Thu, 06 Oct 2022 16:37:03 -0700 (PDT) X-Gm-Message-State: ACrzQf1RhWh1858FJ8axoAkH5ujyQUYf1fxZWErBXUiIlke8GbBxPGlk ahk5Uk3gqFAUfnb3RjOn+x9K7rd5NVXn3pq2ruc= X-Google-Smtp-Source: AMsMyM5tvZWHSrcOLtkY/lX0Q7Qvr/oXlGj5vIRT4adjylKOfvaHnErU8AKkQNdqtGo/HZJDgntpViQRNpApZtsIptY= X-Received: by 2002:a05:6102:2908:b0:398:ac40:d352 with SMTP id cz8-20020a056102290800b00398ac40d352mr1292105vsb.55.1665099409449; Thu, 06 Oct 2022 16:36:49 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:ab0:6ed0:0:b0:3d9:6dfd:499 with HTTP; Thu, 6 Oct 2022 16:36:48 -0700 (PDT) In-Reply-To: <6396875c-146a-acf5-dd9e-7f93ba1b4bc3@csgroup.eu> References: <20221006165346.73159-1-Jason@zx2c4.com> <20221006165346.73159-4-Jason@zx2c4.com> <848ed24c-13ef-6c38-fd13-639b33809194@csgroup.eu> <6396875c-146a-acf5-dd9e-7f93ba1b4bc3@csgroup.eu> From: "Jason A. Donenfeld" Date: Thu, 6 Oct 2022 17:36:48 -0600 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH v3 3/5] treewide: use get_random_u32() when possible To: Christophe Leroy Cc: "linux-kernel@vger.kernel.org" , "patches@lists.linux.dev" , Andreas Noever , Andrew Morton , Andy Shevchenko , Borislav Petkov , Catalin Marinas , =?UTF-8?Q?Christoph_B=C3=B6hmwalder?= , Christoph Hellwig , Daniel Borkmann , Dave Airlie , Dave Hansen , "David S . Miller" , Eric Dumazet , Florian Westphal , Greg Kroah-Hartman , "H . Peter Anvin" , Heiko Carstens , Helge Deller , Herbert Xu , Huacai Chen , Hugh Dickins , Jakub Kicinski , "James E . J . Bottomley" , Jan Kara , Jason Gunthorpe , Jens Axboe , Johannes Berg , Jonathan Corbet , Jozsef Kadlecsik , KP Singh , Kees Cook , Marco Elver , Mauro Carvalho Chehab , Michael Ellerman , Pablo Neira Ayuso , Paolo Abeni , Peter Zijlstra , Richard Weinberger , Russell King , "Theodore Ts'o" , Thomas Bogendoerfer , Thomas Gleixner , Thomas Graf , Ulf Hansson , Vignesh Raghavendra , WANG Xuerui , Will Deacon , Yury Norov , "dri-devel@lists.freedesktop.org" , "kasan-dev@googlegroups.com" , "kernel-janitors@vger.kernel.org" , "linux-arm-kernel@lists.infradead.org" , "linux-block@vger.kernel.org" , "linux-crypto@vger.kernel.org" , "linux-doc@vger.kernel.org" , "linux-fsdevel@vger.kernel.org" , "linux-media@vger.kernel.org" , "linux-mips@vger.kernel.org" , "linux-mm@kvack.org" , "linux-mmc@vger.kernel.org" , "linux-mtd@lists.infradead.org" , "linux-nvme@lists.infradead.org" , "linux-parisc@vger.kernel.org" , "linux-rdma@vger.kernel.org" , "linux-s390@vger.kernel.org" , "linux-um@lists.infradead.org" , "linux-usb@vger.kernel.org" , "linux-wireless@vger.kernel.org" , "linuxppc-dev@lists.ozlabs.org" , "loongarch@lists.linux.dev" , "netdev@vger.kernel.org" , "sparclinux@vger.kernel.org" , "x86@kernel.org" , =?UTF-8?B?VG9rZSBIw7hpbGFuZC1Kw7hyZ2Vuc2Vu?= , Chuck Lever , Jan Kara Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1665099439; a=rsa-sha256; cv=none; b=HpE6pL6sXmykXgNnjQQcBPgR41/Or9ARwB71M9/hM3cxeWW2AhrCMPDezwZzGvq1TYet6x ma221lxxmF/m//bBsOGwEHsGCw02iB+coErgO+7HC+jWzSs05HMcDlq5wnuD84Sj2dN0JC 9tFzK3MwbwPH2xXpmXi8nTVKwTc3Tho= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1665099439; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=eDWvYu+uSvuLU1D2yrcps4Uxg3s4afpQR1DZP1HAENk=; b=uzE+u+4Y5NEv2NZSqRdKo65EaJBGRMqz7P7iUnwXmbZV8KlGtt98a7Xqr3o+TYgZYVIRfI JEjiI4nRpPBawwDLnEidSQW6YunNcJN61YLI619c9z8z5uQzPd8iMNYXH6H+EqNt8rrkwY kpg6E4SspVyNda9mh0gj46zYmEGfWYU= ARC-Authentication-Results: i=1; imf25.hostedemail.com; dkim=pass header.d=zx2c4.com header.s=20210105 header.b=TcHt+d7y; spf=pass (imf25.hostedemail.com: domain of "SRS0=tIOp=2H=zx2c4.com=Jason@kernel.org" designates 145.40.68.75 as permitted sender) smtp.mailfrom="SRS0=tIOp=2H=zx2c4.com=Jason@kernel.org"; dmarc=pass (policy=quarantine) header.from=zx2c4.com X-Stat-Signature: cokuudq777t3h3dbmahrzrn4fg4acs78 X-Rspamd-Queue-Id: 398F1A0017 Authentication-Results: imf25.hostedemail.com; dkim=pass header.d=zx2c4.com header.s=20210105 header.b=TcHt+d7y; spf=pass (imf25.hostedemail.com: domain of "SRS0=tIOp=2H=zx2c4.com=Jason@kernel.org" designates 145.40.68.75 as permitted sender) smtp.mailfrom="SRS0=tIOp=2H=zx2c4.com=Jason@kernel.org"; dmarc=pass (policy=quarantine) header.from=zx2c4.com X-Rspam-User: X-Rspamd-Server: rspam06 X-HE-Tag: 1665099438-7127 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On 10/6/22, Christophe Leroy wrote: > > > Le 06/10/2022 =C3=A0 19:31, Christophe Leroy a =C3=A9crit : >> >> >> Le 06/10/2022 =C3=A0 19:24, Jason A. Donenfeld a =C3=A9crit : >>> Hi Christophe, >>> >>> On Thu, Oct 6, 2022 at 11:21 AM Christophe Leroy >>> wrote: >>>> Le 06/10/2022 =C3=A0 18:53, Jason A. Donenfeld a =C3=A9crit : >>>>> The prandom_u32() function has been a deprecated inline wrapper aroun= d >>>>> get_random_u32() for several releases now, and compiles down to the >>>>> exact same code. Replace the deprecated wrapper with a direct call to >>>>> the real function. The same also applies to get_random_int(), which i= s >>>>> just a wrapper around get_random_u32(). >>>>> >>>>> Reviewed-by: Kees Cook >>>>> Acked-by: Toke H=C3=B8iland-J=C3=B8rgensen # for sch_c= ake >>>>> Acked-by: Chuck Lever # for nfsd >>>>> Reviewed-by: Jan Kara # for ext4 >>>>> Signed-off-by: Jason A. Donenfeld >>>>> --- >>>> >>>>> diff --git a/arch/powerpc/kernel/process.c >>>>> b/arch/powerpc/kernel/process.c >>>>> index 0fbda89cd1bb..9c4c15afbbe8 100644 >>>>> --- a/arch/powerpc/kernel/process.c >>>>> +++ b/arch/powerpc/kernel/process.c >>>>> @@ -2308,6 +2308,6 @@ void notrace __ppc64_runlatch_off(void) >>>>> unsigned long arch_align_stack(unsigned long sp) >>>>> { >>>>> if (!(current->personality & ADDR_NO_RANDOMIZE) && >>>>> randomize_va_space) >>>>> - sp -=3D get_random_int() & ~PAGE_MASK; >>>>> + sp -=3D get_random_u32() & ~PAGE_MASK; >>>>> return sp & ~0xf; >>>> >>>> Isn't that a candidate for prandom_u32_max() ? >>>> >>>> Note that sp is deemed to be 16 bytes aligned at all time. >>> >>> Yes, probably. It seemed non-trivial to think about, so I didn't. But >>> let's see here... maybe it's not too bad: >>> >>> If PAGE_MASK is always ~(PAGE_SIZE-1), then ~PAGE_MASK is >>> (PAGE_SIZE-1), so prandom_u32_max(PAGE_SIZE) should yield the same >>> thing? Is that accurate? And holds across platforms (this comes up a >>> few places)? If so, I'll do that for a v4. >>> >> >> On powerpc it is always (from arch/powerpc/include/asm/page.h) : >> >> /* >> * Subtle: (1 << PAGE_SHIFT) is an int, not an unsigned long. So if we >> * assign PAGE_MASK to a larger type it gets extended the way we want >> * (i.e. with 1s in the high bits) >> */ >> #define PAGE_MASK (~((1 << PAGE_SHIFT) - 1)) >> >> #define PAGE_SIZE (1UL << PAGE_SHIFT) >> >> >> So it would work I guess. > > But taking into account that sp must remain 16 bytes aligned, would it > be better to do something like ? > > sp -=3D prandom_u32_max(PAGE_SIZE >> 4) << 4; > > return sp; Does this assume that sp is already aligned at the beginning of the function? I'd assume from the function's name that this isn't the case? Jason