From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-24.8 required=3.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_CR_TRAILER,INCLUDES_PATCH,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1,USER_IN_DEF_DKIM_WL autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C94DFC433DB for ; Mon, 18 Jan 2021 13:06:57 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 3E41B22227 for ; Mon, 18 Jan 2021 13:06:56 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 3E41B22227 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 45E4B8D0014; Mon, 18 Jan 2021 08:06:56 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 3E7DB8D0002; Mon, 18 Jan 2021 08:06:56 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 289988D0014; Mon, 18 Jan 2021 08:06:56 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0189.hostedemail.com [216.40.44.189]) by kanga.kvack.org (Postfix) with ESMTP id 0C1938D0002 for ; Mon, 18 Jan 2021 08:06:56 -0500 (EST) Received: from smtpin13.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with ESMTP id C8DA28249980 for ; Mon, 18 Jan 2021 13:06:55 +0000 (UTC) X-FDA: 77718920790.13.nerve96_460350127549 Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin13.hostedemail.com (Postfix) with ESMTP id AAD6B18140B75 for ; Mon, 18 Jan 2021 13:06:55 +0000 (UTC) X-HE-Tag: nerve96_460350127549 X-Filterd-Recvd-Size: 11468 Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by imf31.hostedemail.com (Postfix) with ESMTP for ; Mon, 18 Jan 2021 13:06:55 +0000 (UTC) Received: by mail-wr1-f44.google.com with SMTP id 7so9157593wrz.0 for ; Mon, 18 Jan 2021 05:06:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=cKlyhU48mWEpYzjNOoia+4brb6Khl72pdXiLf43hFhE=; b=ekhROC2aXDBAWTCzv6WFgHCmRShFyHm1v7sHZ5+v5tFn2ZpS55LuYKWlMD8RbcwgPi hYOWPS5cQCRRY6kIAJFxyQwG/VenhFj9rX3agQn3MN0M9KFnSC89ocEtGf8/Y9BtdxAt DbE7ItMx0GHz0wGRfFClKB9C6Xkxwd9AmS/CE/TNuTSbqwbm1ABpJK9mwkF0dJJgPQhr Wbu+RVfuYvQ1urD0tvmZjuV42+GD5YTpiiluPcXpgj5lFH+s6/7ysrrvrHo1G9faNl88 OC+mlP0VfpyESp4NqldQXtbA5RJu1D2KuVplkQ33HKRyFxf2I1UU9lghS4yAGEvnDmaU BXaw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=cKlyhU48mWEpYzjNOoia+4brb6Khl72pdXiLf43hFhE=; b=CnkBFW86K2tcUvkEthYd/d0Dogf0+sLTsgQEGbT5feyrUjzjhvs6umIGd1jhuqD/Hm pOvOPdcskGjQC52hRyMeceruE7AX3Y2dK1nKwCvx3N6dh7uSjlSp7sZbxE+1yNjX+e5Y NVb/S20LSJBLkcZFgKRraTmmrpzYLCa9h7TrRvpsRwmsBJJkB8j80Q9Z9ajs2X8/Iesh aVnlqFWuREHBjphDEVTd93oTzNDMYURr0NN/HkyTmahP0pwiU9P7HyCvElWqRgjV2wAr nJWxrc2eHyawzsBK1P1KwGmGVHkULhB3Khbj3qY2QpUuALJsYHk3bMOcAGodoSxk+WUj NvqQ== X-Gm-Message-State: AOAM531qokt3Kj9rKid7l1fJ45DDsE7NWhGaCAtEVA6HD87antQt2eiD SyF1WYGgjXqKT3KM5bIlG48MfQ== X-Google-Smtp-Source: ABdhPJzdA1N8blZ8UvYuCd8AnUXhh8zHaT41utBC4h2/zlwG6uU4shC3cJWbhg76gb3tCpg+sHiFsQ== X-Received: by 2002:a5d:4241:: with SMTP id s1mr25922028wrr.269.1610975213753; Mon, 18 Jan 2021 05:06:53 -0800 (PST) Received: from elver.google.com ([2a00:79e0:15:13:f693:9fff:fef4:2449]) by smtp.gmail.com with ESMTPSA id x128sm26669557wmb.29.2021.01.18.05.06.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 18 Jan 2021 05:06:52 -0800 (PST) Date: Mon, 18 Jan 2021 14:06:47 +0100 From: Marco Elver To: Andrey Konovalov Cc: Dmitry Vyukov , Alexander Potapenko , Andrew Morton , Catalin Marinas , Will Deacon , Vincenzo Frascino , Andrey Ryabinin , Peter Collingbourne , Evgenii Stepanov , Branislav Rankov , Kevin Brodsky , kasan-dev@googlegroups.com, linux-arm-kernel@lists.infradead.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] kasan: fix HW_TAGS boot parameters Message-ID: References: <4e9c4a4bdcadc168317deb2419144582a9be6e61.1610736745.git.andreyknvl@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4e9c4a4bdcadc168317deb2419144582a9be6e61.1610736745.git.andreyknvl@google.com> User-Agent: Mutt/2.0.2 (2020-11-20) X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Fri, Jan 15, 2021 at 07:53PM +0100, Andrey Konovalov wrote: > The initially proposed KASAN command line parameters are redundant. > > This change drops the complex "kasan.mode=off/prod/full" parameter > and adds a simpler kill switch "kasan=off/on" instead. The new parameter > together with the already existing ones provides a cleaner way to > express the same set of features. > > The full set of parameters with this change: > > kasan=off/on - whether KASAN is enabled > kasan.fault=report/panic - whether to only print a report or also panic > kasan.stacktrace=off/on - whether to collect alloc/free stack traces > > Default values: > > kasan=on > kasan.fault=report > kasan.stacktrace=on (if CONFIG_DEBUG_KERNEL=y) > kasan.stacktrace=off (otherwise) > > Link: https://linux-review.googlesource.com/id/Ib3694ed90b1e8ccac6cf77dfd301847af4aba7b8 > Signed-off-by: Andrey Konovalov Thanks for the simplification. Reviewed-by: Marco Elver > --- > Documentation/dev-tools/kasan.rst | 27 +++-------- > mm/kasan/hw_tags.c | 77 +++++++++++++------------------ > 2 files changed, 38 insertions(+), 66 deletions(-) > > diff --git a/Documentation/dev-tools/kasan.rst b/Documentation/dev-tools/kasan.rst > index 0fc3fb1860c4..1651d961f06a 100644 > --- a/Documentation/dev-tools/kasan.rst > +++ b/Documentation/dev-tools/kasan.rst > @@ -160,29 +160,14 @@ intended for use in production as a security mitigation. Therefore it supports > boot parameters that allow to disable KASAN competely or otherwise control > particular KASAN features. > > -The things that can be controlled are: > +- ``kasan=off`` or ``=on`` controls whether KASAN is enabled (default: ``on``). > > -1. Whether KASAN is enabled at all. > -2. Whether KASAN collects and saves alloc/free stacks. > -3. Whether KASAN panics on a detected bug or not. > +- ``kasan.stacktrace=off`` or ``=on`` disables or enables alloc and free stack > + traces collection (default: ``on`` for ``CONFIG_DEBUG_KERNEL=y``, otherwise > + ``off``). > > -The ``kasan.mode`` boot parameter allows to choose one of three main modes: > - > -- ``kasan.mode=off`` - KASAN is disabled, no tag checks are performed > -- ``kasan.mode=prod`` - only essential production features are enabled > -- ``kasan.mode=full`` - all KASAN features are enabled > - > -The chosen mode provides default control values for the features mentioned > -above. However it's also possible to override the default values by providing: > - > -- ``kasan.stacktrace=off`` or ``=on`` - enable alloc/free stack collection > - (default: ``on`` for ``mode=full``, > - otherwise ``off``) > -- ``kasan.fault=report`` or ``=panic`` - only print KASAN report or also panic > - (default: ``report``) > - > -If ``kasan.mode`` parameter is not provided, it defaults to ``full`` when > -``CONFIG_DEBUG_KERNEL`` is enabled, and to ``prod`` otherwise. > +- ``kasan.fault=report`` or ``=panic`` controls whether to only print a KASAN > + report or also panic the kernel (default: ``report``). > > For developers > ~~~~~~~~~~~~~~ > diff --git a/mm/kasan/hw_tags.c b/mm/kasan/hw_tags.c > index 55bd6f09c70f..e529428e7a11 100644 > --- a/mm/kasan/hw_tags.c > +++ b/mm/kasan/hw_tags.c > @@ -19,11 +19,10 @@ > > #include "kasan.h" > > -enum kasan_arg_mode { > - KASAN_ARG_MODE_DEFAULT, > - KASAN_ARG_MODE_OFF, > - KASAN_ARG_MODE_PROD, > - KASAN_ARG_MODE_FULL, > +enum kasan_arg { > + KASAN_ARG_DEFAULT, > + KASAN_ARG_OFF, > + KASAN_ARG_ON, > }; > > enum kasan_arg_stacktrace { > @@ -38,7 +37,7 @@ enum kasan_arg_fault { > KASAN_ARG_FAULT_PANIC, > }; > > -static enum kasan_arg_mode kasan_arg_mode __ro_after_init; > +static enum kasan_arg kasan_arg __ro_after_init; > static enum kasan_arg_stacktrace kasan_arg_stacktrace __ro_after_init; > static enum kasan_arg_fault kasan_arg_fault __ro_after_init; > > @@ -52,26 +51,24 @@ DEFINE_STATIC_KEY_FALSE(kasan_flag_stacktrace); > /* Whether panic or disable tag checking on fault. */ > bool kasan_flag_panic __ro_after_init; > > -/* kasan.mode=off/prod/full */ > -static int __init early_kasan_mode(char *arg) > +/* kasan=off/on */ > +static int __init early_kasan_flag(char *arg) > { > if (!arg) > return -EINVAL; > > if (!strcmp(arg, "off")) > - kasan_arg_mode = KASAN_ARG_MODE_OFF; > - else if (!strcmp(arg, "prod")) > - kasan_arg_mode = KASAN_ARG_MODE_PROD; > - else if (!strcmp(arg, "full")) > - kasan_arg_mode = KASAN_ARG_MODE_FULL; > + kasan_arg = KASAN_ARG_OFF; > + else if (!strcmp(arg, "on")) > + kasan_arg = KASAN_ARG_ON; > else > return -EINVAL; > > return 0; > } > -early_param("kasan.mode", early_kasan_mode); > +early_param("kasan", early_kasan_flag); > > -/* kasan.stack=off/on */ > +/* kasan.stacktrace=off/on */ > static int __init early_kasan_flag_stacktrace(char *arg) > { > if (!arg) > @@ -113,8 +110,8 @@ void kasan_init_hw_tags_cpu(void) > * as this function is only called for MTE-capable hardware. > */ > > - /* If KASAN is disabled, do nothing. */ > - if (kasan_arg_mode == KASAN_ARG_MODE_OFF) > + /* If KASAN is disabled via command line, don't initialize it. */ > + if (kasan_arg == KASAN_ARG_OFF) > return; > > hw_init_tags(KASAN_TAG_MAX); > @@ -124,43 +121,28 @@ void kasan_init_hw_tags_cpu(void) > /* kasan_init_hw_tags() is called once on boot CPU. */ > void __init kasan_init_hw_tags(void) > { > - /* If hardware doesn't support MTE, do nothing. */ > + /* If hardware doesn't support MTE, don't initialize KASAN. */ > if (!system_supports_mte()) > return; > > - /* Choose KASAN mode if kasan boot parameter is not provided. */ > - if (kasan_arg_mode == KASAN_ARG_MODE_DEFAULT) { > - if (IS_ENABLED(CONFIG_DEBUG_KERNEL)) > - kasan_arg_mode = KASAN_ARG_MODE_FULL; > - else > - kasan_arg_mode = KASAN_ARG_MODE_PROD; > - } > - > - /* Preset parameter values based on the mode. */ > - switch (kasan_arg_mode) { > - case KASAN_ARG_MODE_DEFAULT: > - /* Shouldn't happen as per the check above. */ > - WARN_ON(1); > - return; > - case KASAN_ARG_MODE_OFF: > - /* If KASAN is disabled, do nothing. */ > + /* If KASAN is disabled via command line, don't initialize it. */ > + if (kasan_arg == KASAN_ARG_OFF) > return; > - case KASAN_ARG_MODE_PROD: > - static_branch_enable(&kasan_flag_enabled); > - break; > - case KASAN_ARG_MODE_FULL: > - static_branch_enable(&kasan_flag_enabled); > - static_branch_enable(&kasan_flag_stacktrace); > - break; > - } > > - /* Now, optionally override the presets. */ > + /* Enable KASAN. */ > + static_branch_enable(&kasan_flag_enabled); > > switch (kasan_arg_stacktrace) { > case KASAN_ARG_STACKTRACE_DEFAULT: > + /* > + * Default to enabling stack trace collection for > + * debug kernels. > + */ > + if (IS_ENABLED(CONFIG_DEBUG_KERNEL)) > + static_branch_enable(&kasan_flag_stacktrace); > break; > case KASAN_ARG_STACKTRACE_OFF: > - static_branch_disable(&kasan_flag_stacktrace); > + /* Do nothing, kasan_flag_stacktrace keeps its default value. */ > break; > case KASAN_ARG_STACKTRACE_ON: > static_branch_enable(&kasan_flag_stacktrace); > @@ -169,11 +151,16 @@ void __init kasan_init_hw_tags(void) > > switch (kasan_arg_fault) { > case KASAN_ARG_FAULT_DEFAULT: > + /* > + * Default to no panic on report. > + * Do nothing, kasan_flag_panic keeps its default value. > + */ > break; > case KASAN_ARG_FAULT_REPORT: > - kasan_flag_panic = false; > + /* Do nothing, kasan_flag_panic keeps its default value. */ > break; > case KASAN_ARG_FAULT_PANIC: > + /* Enable panic on report. */ > kasan_flag_panic = true; > break; > } > -- > 2.30.0.284.gd98b1dd5eaa7-goog >