From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id DDDC9C433EF for ; Thu, 10 Feb 2022 23:07:27 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 60BDF6B0074; Thu, 10 Feb 2022 18:07:27 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 5B9A76B0075; Thu, 10 Feb 2022 18:07:27 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 4A7A76B0078; Thu, 10 Feb 2022 18:07:27 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0049.hostedemail.com [216.40.44.49]) by kanga.kvack.org (Postfix) with ESMTP id 3B0226B0074 for ; Thu, 10 Feb 2022 18:07:27 -0500 (EST) Received: from smtpin10.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay05.hostedemail.com (Postfix) with ESMTP id B3133181AC9C6 for ; Thu, 10 Feb 2022 23:07:26 +0000 (UTC) X-FDA: 79128408492.10.FF2C2F8 Received: from dfw.source.kernel.org (dfw.source.kernel.org [139.178.84.217]) by imf31.hostedemail.com (Postfix) with ESMTP id 2BEFD20009 for ; Thu, 10 Feb 2022 23:07:26 +0000 (UTC) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id 58F1D61D5E for ; Thu, 10 Feb 2022 23:07:25 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 122AAC340F7 for ; Thu, 10 Feb 2022 23:07:23 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1644534443; bh=MpjbTs2AoYPM1cEieyRbZViurjwRjHJe1IjmNAem4ZQ=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=pLe8bXcq19et61m9ujLHJQ85Z8TpSMP5fXsivO2GIQcSObRnPxPgKGUq8CI8z+2+U jE51eBZVxdfAhwEOyuIJttUpgjZ8ckXrKMB4DV6Y+4hNQYIo5iBKtDPDqVcXOzyvUM pska714X551rWzbsXzRZeqvI3eRlexMlpeoZmF/Pf0OsUmJW5kvhUt1KUoUsyDzKPC 8yTkdwLAcjtLUvNcbYzK+rkmVNyNkoAh7a+q6x/Qwu61KDT4ph8Xo3dtKS2kQllVMy NEmd5zwaTC1aKVDVszaAyx1JOe3rVimQsEBBY/EodvKt87oHMveHSisYmhN1QX4Y6U sNdeKgHC18sZA== Received: by mail-ed1-f49.google.com with SMTP id s7so13622817edd.3 for ; Thu, 10 Feb 2022 15:07:22 -0800 (PST) X-Gm-Message-State: AOAM531LVi4d612C49338373heymKsYkbJMKjbD9Rw9lY1wnVj12QnjM b4GQaGxKrcc+062ZFREyPAb7uWCdu3d7MclnqN6pPA== X-Google-Smtp-Source: ABdhPJxS8HJLUSGJfYOhID6yYZrHkqyIQTwmdEqPryBMs8qpUzLEn5ETtQ6MUdtPgqQJ5O+pj34qGLRGx/VYU3EGO5g= X-Received: by 2002:a05:6402:90b:: with SMTP id g11mr7368740edz.73.1644534441171; Thu, 10 Feb 2022 15:07:21 -0800 (PST) MIME-Version: 1.0 References: <20220130211838.8382-1-rick.p.edgecombe@intel.com> <20220130211838.8382-19-rick.p.edgecombe@intel.com> <4c216532-2b68-dd95-93f1-542df4786d7a@intel.com> In-Reply-To: <4c216532-2b68-dd95-93f1-542df4786d7a@intel.com> From: Andy Lutomirski Date: Thu, 10 Feb 2022 15:07:09 -0800 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH 18/35] mm: Add guard pages around a shadow stack. To: Dave Hansen Cc: Rick Edgecombe , x86@kernel.org, "H . Peter Anvin" , Thomas Gleixner , Ingo Molnar , linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, linux-api@vger.kernel.org, Arnd Bergmann , Andy Lutomirski , Balbir Singh , Borislav Petkov , Cyrill Gorcunov , Dave Hansen , Eugene Syromiatnikov , Florian Weimer , "H . J . Lu" , Jann Horn , Jonathan Corbet , Kees Cook , Mike Kravetz , Nadav Amit , Oleg Nesterov , Pavel Machek , Peter Zijlstra , Randy Dunlap , "Ravi V . Shankar" , Dave Martin , Weijiang Yang , "Kirill A . Shutemov" , joao.moreira@intel.com, John Allen , kcc@google.com, eranian@google.com, Yu-cheng Yu Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 2BEFD20009 X-Stat-Signature: 3naw4b639s81a8ykhy7ct1he7wkrdieq X-Rspam-User: Authentication-Results: imf31.hostedemail.com; dkim=pass header.d=kernel.org header.s=k20201202 header.b=pLe8bXcq; spf=pass (imf31.hostedemail.com: domain of luto@kernel.org designates 139.178.84.217 as permitted sender) smtp.mailfrom=luto@kernel.org; dmarc=pass (policy=none) header.from=kernel.org X-Rspamd-Server: rspam06 X-HE-Tag: 1644534446-382265 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Thu, Feb 10, 2022 at 2:44 PM Dave Hansen wrote: > > On 1/30/22 13:18, Rick Edgecombe wrote: > > INCSSP(Q/D) increments shadow stack pointer and 'pops and discards' the > > first and the last elements in the range, effectively touches those memory > > areas. > > > > The maximum moving distance by INCSSPQ is 255 * 8 = 2040 bytes and > > 255 * 4 = 1020 bytes by INCSSPD. Both ranges are far from PAGE_SIZE. > > Thus, putting a gap page on both ends of a shadow stack prevents INCSSP, > > CALL, and RET from going beyond. > > What is the downside of not applying this patch? The shadow stack gap > is 1MB instead of 4k? > > That, frankly, doesn't seem too bad. How badly do we *need* this patch? 1MB of oer-thread guard address space in a 32-bit program may be a show stopper. Do we intend to support any of this for 32-bit? --Andy