From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id D3DA2C54EE9 for ; Sun, 25 Sep 2022 07:17:52 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 188178D0002; Sun, 25 Sep 2022 03:17:52 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 1106C8D0001; Sun, 25 Sep 2022 03:17:52 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id EF3A98D0002; Sun, 25 Sep 2022 03:17:51 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0012.hostedemail.com [216.40.44.12]) by kanga.kvack.org (Postfix) with ESMTP id DC52F8D0001 for ; Sun, 25 Sep 2022 03:17:51 -0400 (EDT) Received: from smtpin21.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay10.hostedemail.com (Postfix) with ESMTP id AD0DEC028C for ; Sun, 25 Sep 2022 07:17:51 +0000 (UTC) X-FDA: 79949753142.21.ACDEEF4 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by imf09.hostedemail.com (Postfix) with ESMTP id 3BB4E140004 for ; Sun, 25 Sep 2022 07:17:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1664090269; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FnuW0+nquE7jeCs1wGd25t/HgD5sAtMc07QK9kih2sQ=; b=B97KTn2dpYAt61kIInCLOK/2Ro6Wst4uMijGFSzgHYRdcZYdeHN2Z3ugLtJoUKxafz8yNC sWsj/xIEwaV1yrv9Q1SsmiCxhVHRLyjrG7MDBtCipNp9CsQ1df0T63dAJdIXFk2HpFvimj SNz8dinnXFQVzc5AwMsgibAO84z47E8= Received: from mail-qt1-f198.google.com (mail-qt1-f198.google.com [209.85.160.198]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_128_GCM_SHA256) id us-mta-265-G5RZiu3PMHSbzt-MVZ8TFg-1; Sun, 25 Sep 2022 03:17:48 -0400 X-MC-Unique: G5RZiu3PMHSbzt-MVZ8TFg-1 Received: by mail-qt1-f198.google.com with SMTP id cb22-20020a05622a1f9600b0035bb51792d2so2694417qtb.5 for ; Sun, 25 Sep 2022 00:17:48 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:user-agent:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date; bh=FnuW0+nquE7jeCs1wGd25t/HgD5sAtMc07QK9kih2sQ=; b=EhVdIAP87PtBo0Rh/FvpkkNy4vEz1s4Fsi+mE4sE3Tz/jwWfNwSFqTJYHPepIwGuZe 0GRXXqLgiHRb94LCtkIpGawNRdNrgIoBYHccthQJNdFNbGJ/NOqgpxep/hCEyFqVs7Pk TFx/4LbZTMx1O2pGJVHlL1Qyu+lNjMraF7EMvSDHTZKuZs/A03B3VgYJXPfLbQG8/Ton OqzPQ5pt1qii0iLhZ9o1sgE1bX3Hqsdp8nyvP7Uy0+xEOkzdyiPYHkjybYE1RMGLmSpn eWYu3UQNPUVdYB8+VvVdR2iMBPOzHf51w+VgqLzw9x4kOxGAWrzgh5LBzhxRFxqVENsn TgTA== X-Gm-Message-State: ACrzQf3s/3XZzrHVomL5S5v2ncVrI/ExHFfm2BdXpJxzAdt7vUZJoMWq aoNS5c/plyTedfq4VDwJIkzYJ2DMOoWYp4B7Gy61X2iKw7nt6EtUdUjYUn1grEh5kl9MkjDDD65 tVa669lPR/HE= X-Received: by 2002:a05:620a:c8f:b0:6cb:e329:b5b9 with SMTP id q15-20020a05620a0c8f00b006cbe329b5b9mr10667163qki.95.1664090268091; Sun, 25 Sep 2022 00:17:48 -0700 (PDT) X-Google-Smtp-Source: AMsMyM4u6YF4dJIrwAN1QRZGgvTOpwH6qKYsc23O//LxYiiudu83+P6fv+LpA21i63RBBqqlayo//g== X-Received: by 2002:a05:620a:c8f:b0:6cb:e329:b5b9 with SMTP id q15-20020a05620a0c8f00b006cbe329b5b9mr10667159qki.95.1664090267816; Sun, 25 Sep 2022 00:17:47 -0700 (PDT) Received: from gerbillo.redhat.com (146-241-97-96.dyn.eolo.it. [146.241.97.96]) by smtp.gmail.com with ESMTPSA id bp30-20020a05620a459e00b006c479acd82fsm10375465qkb.7.2022.09.25.00.17.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Sep 2022 00:17:47 -0700 (PDT) Message-ID: Subject: Re: [PATCH v2 04/16] skbuff: Phase out ksize() fallback for frag_size From: Paolo Abeni To: Kees Cook , Vlastimil Babka Cc: "David S. Miller" , Eric Dumazet , Jakub Kicinski , netdev@vger.kernel.org, "Ruhl, Michael J" , Hyeonggon Yoo <42.hyeyoo@gmail.com>, Christoph Lameter , Pekka Enberg , David Rientjes , Joonsoo Kim , Andrew Morton , Greg Kroah-Hartman , Nick Desaulniers , Alex Elder , Josef Bacik , David Sterba , Sumit Semwal , Christian =?ISO-8859-1?Q?K=F6nig?= , Jesse Brandeburg , Daniel Micay , Yonghong Song , Marco Elver , Miguel Ojeda , linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-btrfs@vger.kernel.org, linux-media@vger.kernel.org, dri-devel@lists.freedesktop.org, linaro-mm-sig@lists.linaro.org, linux-fsdevel@vger.kernel.org, intel-wired-lan@lists.osuosl.org, dev@openvswitch.org, x86@kernel.org, llvm@lists.linux.dev, linux-hardening@vger.kernel.org Date: Sun, 25 Sep 2022 09:17:40 +0200 In-Reply-To: <20220923202822.2667581-5-keescook@chromium.org> References: <20220923202822.2667581-1-keescook@chromium.org> <20220923202822.2667581-5-keescook@chromium.org> User-Agent: Evolution 3.42.4 (3.42.4-2.fc35) MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit ARC-Authentication-Results: i=1; imf09.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=B97KTn2d; spf=pass (imf09.hostedemail.com: domain of pabeni@redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=pabeni@redhat.com; dmarc=pass (policy=none) header.from=redhat.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1664090270; a=rsa-sha256; cv=none; b=F1MJ5rwnrvskhd+RjhpJvK8xh2b66URHNHAK09+wEaSld9dbcElofxIA8Z2FlsiHileS5S NxyemWqHJPMzNfhS5+G/luXzKWsKS2/0jX3O6hmz3KcOtxZ/j7fIwal86ZR/98DlXnu6iE uiErhXu804BLAC8JSqYhwbI8eZewt6k= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1664090270; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=FnuW0+nquE7jeCs1wGd25t/HgD5sAtMc07QK9kih2sQ=; b=eE3A9tRM8MJjdZpYzOo3vVH5v26xdzBB39Pzl3dTa/Sg8WmMXjOi2gM5wdY1lKvEFLBVbk iS5tcNBpxK0jNizdRVsZbWeZAlFVgSpmvp3ATPu9c5XEtxVJyCIFaFGtKtLae3EIlHujnB U/GtvEeL3HhhJOziTlF4/vQtvBuVSDw= X-Rspamd-Server: rspam04 X-Rspamd-Queue-Id: 3BB4E140004 Authentication-Results: imf09.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=B97KTn2d; spf=pass (imf09.hostedemail.com: domain of pabeni@redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=pabeni@redhat.com; dmarc=pass (policy=none) header.from=redhat.com X-Stat-Signature: 4jabgx76w3k3j35anoj7kjatgj1xbcih X-Rspam-User: X-HE-Tag: 1664090270-273729 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Fri, 2022-09-23 at 13:28 -0700, Kees Cook wrote: > All callers of APIs that allowed a 0-sized frag_size appear to be > passing actual size information already AFAICS, not yet: drivers/net/ethernet/qlogic/qed/qed_ll2.c: skb = build_skb(buffer->data, 0); // -> __build_skb(..., 0)  // -> __build_skb_around() drivers/net/ethernet/broadcom/bnx2.c: skb = build_skb(data, 0); I guess some more drivers have calls leading to  __build_skb_around(..., 0) there are several call path to checks... > , so this use of ksize() can > be removed. However, just in case there is something still depending > on this behavior, issue a WARN and fall back to as before to ksize() > which means we'll also potentially get KASAN warnings. > > Cc: "David S. Miller" > Cc: Eric Dumazet > Cc: Jakub Kicinski > Cc: Paolo Abeni > Cc: netdev@vger.kernel.org > Signed-off-by: Kees Cook > --- > net/core/skbuff.c | 18 ++++++++++-------- > 1 file changed, 10 insertions(+), 8 deletions(-) > > diff --git a/net/core/skbuff.c b/net/core/skbuff.c > index 0b30fbdbd0d0..84ca89c781cd 100644 > --- a/net/core/skbuff.c > +++ b/net/core/skbuff.c > @@ -195,7 +195,11 @@ static void __build_skb_around(struct sk_buff *skb, void *data, > unsigned int frag_size) > { > struct skb_shared_info *shinfo; > - unsigned int size = frag_size ? : ksize(data); > + unsigned int size = frag_size; > + > + /* All callers should be setting frag size now? */ > + if (WARN_ON_ONCE(size == 0)) > + size = ksize(data); At some point in the future, I guess we could even drop this check, right? Thanks! Paolo