From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20088.outbound.protection.outlook.com [40.107.2.88]) by sourceware.org (Postfix) with ESMTPS id 87C453973014 for ; Mon, 8 Feb 2021 16:48:01 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 87C453973014 Received: from DB6P18901CA0001.EURP189.PROD.OUTLOOK.COM (2603:10a6:4:16::11) by DB7PR08MB3514.eurprd08.prod.outlook.com (2603:10a6:10:49::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.19; Mon, 8 Feb 2021 16:47:56 +0000 Received: from DB5EUR03FT040.eop-EUR03.prod.protection.outlook.com (2603:10a6:4:16:cafe::ad) by DB6P18901CA0001.outlook.office365.com (2603:10a6:4:16::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.19 via Frontend Transport; Mon, 8 Feb 2021 16:47:56 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; sourceware.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;sourceware.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT040.mail.protection.outlook.com (10.152.20.243) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3784.11 via Frontend Transport; Mon, 8 Feb 2021 16:47:56 +0000 Received: ("Tessian outbound af289585f0f4:v71"); Mon, 08 Feb 2021 16:47:56 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 54531cb1e5ede015 X-CR-MTA-TID: 64aa7808 Received: from 580ff8741db8.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 899E26C2-8A88-41D6-9062-C3225DB29303.1; Mon, 08 Feb 2021 16:47:49 +0000 Received: from EUR04-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 580ff8741db8.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 08 Feb 2021 16:47:49 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=j+/QndxA7+HNOTiVxRDtvbrOSPpOgCU2s4uovQ0xQo0L1HZ9ldK8wnhOc8jhEe0qCLCD2TMd1yEASzILBcmWwXQeCrfQte4qM/HTO5OCygnMc+v7cbDM6Px512mj7KMFF6WCZyUS0OHMtd511qbEyOgO+7T2ZzZcSXubSDCF/AA978l3TpJslc3dRaGD6DYAxgWDVVd4zuX6ShWTl3L2jkULfWCs9OzltHbCYHIAoTHLbSYUUnPq4Dzj46J3IUhuMfp8Ainm+etqsb44R11C8Xc0UsNwQFzFJIzuxGnEDeOk2Oxa3IJDj6CbY9PxsZKMxOw/yHohAJ8OvrHlKxkZrA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=DB2v8PHfrJ9tbG05i4n0kxFokPsXDxgmzHTWU92GX/4=; b=Qonj8EmeByk+h3YGt4WM8YMCan34LIuJq9bTPvTA/f8AOqJ4waQ6DLk4ZecnYJjMGMeiazV57dGSxe5OjyiC4A3OqwQ8DCVbSk4gR6LI1Tw59VRkyh9Sl0cEZxn69DOreZFjgJ59DF2GRnw2zoR62nPNVkwm8myCk++VWVpmlP1r9nZQUIPHvWXTPzoRgzx7xKiGm/+2gClaq5tHuq7L23WE6rMPewCMHEamV5fCizWd/8CauBq/zWPbVY4C+FLM8v94fL4yp8+31RHz7W5U2ULv2F1O3eIR06B95y8g8Z31slw+PmCaoeVdVKYGxfiqtTrNnm0cWIZFzFdHChjbvA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none Authentication-Results-Original: kernel.org; dkim=none (message not signed) header.d=none;kernel.org; dmarc=none action=none header.from=arm.com; Received: from PA4PR08MB6320.eurprd08.prod.outlook.com (2603:10a6:102:e5::9) by PA4PR08MB6270.eurprd08.prod.outlook.com (2603:10a6:102:f3::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.28; Mon, 8 Feb 2021 16:47:47 +0000 Received: from PA4PR08MB6320.eurprd08.prod.outlook.com ([fe80::60f0:3773:69b8:e336]) by PA4PR08MB6320.eurprd08.prod.outlook.com ([fe80::60f0:3773:69b8:e336%2]) with mapi id 15.20.3825.030; Mon, 8 Feb 2021 16:47:47 +0000 Date: Mon, 8 Feb 2021 16:47:45 +0000 From: Szabolcs Nagy To: Will Deacon , Mark Rutland , libc-alpha@sourceware.org, Kees Cook , Catalin Marinas , Jeremy Linton , Mark Brown , Dave Martin , linux-arm-kernel@lists.infradead.org Subject: Re: [PATCH] arm64: bti: Set PROT_BTI on all BTI executables mapped by the kernel Message-ID: <20210208164744.GA16506@arm.com> References: <20210205173837.39315-1-broonie@kernel.org> <20210205175128.GB12697@gaia> <20210208124451.GB25618@willie-the-truck> <20210208141329.GC8542@arm.com> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20210208141329.GC8542@arm.com> User-Agent: Mutt/1.9.4 (2018-02-28) X-Originating-IP: [217.140.106.50] X-ClientProxiedBy: LO4P123CA0342.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:18c::23) To PA4PR08MB6320.eurprd08.prod.outlook.com (2603:10a6:102:e5::9) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from arm.com (217.140.106.50) by LO4P123CA0342.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:18c::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.17 via Frontend Transport; Mon, 8 Feb 2021 16:47:46 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: b1193e36-f802-4781-c523-08d8cc5148ec X-MS-TrafficTypeDiagnostic: PA4PR08MB6270:|DB7PR08MB3514: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true NoDisclaimer: true X-MS-Oob-TLC-OOBClassifiers: OLM:9508;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 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 X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PA4PR08MB6320.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(39860400002)(136003)(346002)(396003)(366004)(16526019)(186003)(86362001)(2906002)(26005)(55016002)(478600001)(36756003)(7696005)(110136005)(83380400001)(4744005)(316002)(956004)(44832011)(8886007)(66946007)(5660300002)(8936002)(52116002)(1076003)(66476007)(8676002)(2616005)(66556008)(33656002); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData: =?utf-8?B?WlpPd05FS2dQUW82Sk95ZXBFMDZkd3UvZGtlQlUwVE1yZDdYWmwwVXFuQ1h4?= =?utf-8?B?YWtPSStZeVBBak5IMDl4N0Vhb1poVFJYTlovMzZFYzNyYXVCWTIwZGNzYmMy?= =?utf-8?B?OFR5S1FESGdvbXVRaklnYitKVHJsRkoyV1lyR0JBYnIyYlJtZHIrMHZnVkFR?= =?utf-8?B?TkxMVUNpdzRMcHhqMEt6d1RmYUxZVE5kRjF0dVRVT05UYnBPckhUWTQveWQy?= =?utf-8?B?MVh6UU5IN3NvcDRLc1Q2RUo3REJZQTlGRXNJcndpczBERUFuN1BiZ2Y5VnRk?= =?utf-8?B?RWF1WXRCaVpxcEVFcGFWNzVYeWxRMzNicVRRN2gxdExRZzhxTVZkdEd2Y1FT?= =?utf-8?B?dGxUK0hueGl4UmxQL2FvWFRSS2JEaWRKSnFXS2tuRk9TYXd0Snp0bDZjaDM0?= =?utf-8?B?OXpUNUxEU1dQNk03M3h0eVM3UmplUGZJaHFyLzVIV3kzMEcyV2V1bmRIQVNq?= =?utf-8?B?cWVLN2ozMDlBN3ZoY0xQcE1ZTjQxZXJ0TnVJYitEeklFTll3NmZnMW5TMkxS?= =?utf-8?B?MzlpQjExNnplaFdXNHljeTlaZGFwcm5UZzZZS0pWMFgwTmJONzRwZ2x2eCs3?= =?utf-8?B?cHYyL2RmYTlrb21aTzZuTy9xME44U2U5ZytoTW5RVkVmNGd3SWwySG41MjJN?= =?utf-8?B?MnVCM013bi9JWkxIMXBnV2RRelRnS1kvN3RxZ3VCdWtWNzA5OEpxdkhTRzlm?= =?utf-8?B?L085UCsyN01ZZnhEcDM2TE1USlk5QmZwLzlNOW0xOWNMRkdOSUZUM1hqMmZX?= =?utf-8?B?ZHJYNEcxaFhlZ0dWVU0zWVcvdEdLaUNjeUhGMGVzM0QyRXV5UWRYY2dkUU9a?= =?utf-8?B?WFowS0dNcHNEVEU5QkV4bFhDcE1xQnhOVnEycEhlYis2ZmpiRlJiU2lyUHlU?= =?utf-8?B?OHBHajJYdFhHSkUyVUxzNXUvWmVhYWQzK2pjOUhpdkNFT24yYkZjNXdNeFJI?= =?utf-8?B?dWlaRzN0ZktkanhSTU5SNW5SWkVYL0hJbTJGTjNKdHI1YkMwMWFPRGh1MUdZ?= =?utf-8?B?Q0JtUWtGYk41Z25nVmxVT2FGbXR1MWVnd1hNWjVJTGRTdzlvTHVaYmh2VFBi?= =?utf-8?B?N3FyUWFuaDhEcGpkQW9Xa1h5MWRqOXFhNUcyTXBPMTNQYVMzT01FVUE4cVRM?= =?utf-8?B?Z3pWTlZZZTMyVkloUDFRT2laMm53UGw1Wm5VbEpYdnlldmlReWgzdVVrSW5v?= =?utf-8?B?a01XMklZSXA3ZnhDYmJ0L3NBQUdINythVHNjcXBlUUt3MXFES3JVbWVYUi8w?= =?utf-8?B?QVJoTmQ5Rm43S2hnRzB0OHI0d1NRazZZRllvWHR4MEhML2JmRnVqS0l3cWU1?= =?utf-8?B?bTdxV1FpNFdTMHJ3NHErMllXc1RXODgwZElub2xXSjQ4cXZWaG84U0RnQkNG?= =?utf-8?B?YVVpdE5KaWQ0NWFHNVA2VndYOHROTG5WbUVqYUtFdTFXd3Q4bGoya09Hakcw?= =?utf-8?B?VDVpckJNb1RrY3RoeDhBUFJLb3R2S3ZaNjI1SVZDYkhtcjdOTmNPZzZwTmkx?= =?utf-8?B?MnF6cVNPRWR3VHFYOVIrTGNOYUFyNCtlWmNSbEpiTmx5bmh4end6QlZNUXpn?= =?utf-8?B?UDRib1hIeituOHAyeFlSdmhKZnJZOStNZzIvYWpBdUV1SElCUUUwN1ZPY1Nm?= =?utf-8?B?MCs3bGhlVjcxWVZBTEpyd0VzYXlTYlFEZXZXcnpFM1M0a1JqQjRSM0ZQcWR6?= =?utf-8?B?VEpVOFZ1ZTYyQVZvM2lLT0RSMWxIUTRmaHljdVNzT3VNdHpLdEZMVHNiYnhN?= =?utf-8?Q?8DVTVo3liKobf/uyiF0LrapAsQaraZfRn6zegC7?= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4PR08MB6270 Original-Authentication-Results: kernel.org; dkim=none (message not signed) header.d=none;kernel.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT040.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: bf77ae50-2753-4bf2-fdaa-08d8cc514357 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(346002)(136003)(396003)(376002)(39860400002)(36840700001)(46966006)(36860700001)(26005)(186003)(8936002)(316002)(110136005)(478600001)(16526019)(8886007)(2906002)(82310400003)(33656002)(956004)(55016002)(82740400003)(356005)(2616005)(7696005)(44832011)(8676002)(4744005)(5660300002)(70206006)(70586007)(336012)(36756003)(86362001)(83380400001)(81166007)(47076005)(1076003); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Feb 2021 16:47:56.0749 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b1193e36-f802-4781-c523-08d8cc5148ec X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT040.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR08MB3514 X-Spam-Status: No, score=-8.1 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, KAM_MANYTO, MSGID_FROM_MTA_HEADER, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2, SPF_HELO_PASS, SPF_PASS, TXREP, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Feb 2021 16:48:03 -0000 The 02/08/2021 14:13, Szabolcs Nagy via Libc-alpha wrote: > The 02/08/2021 12:44, Will Deacon wrote: > > I'd like an Ack from Szabolcs before we queue this. > > i'm ok with this in principle, but i will rerun > the glibc tests over night to be sure. the patch applied cleanly on top of arm64 for-next/core but it does not work as i expected: executables that do not have the bti property note set seems to get bti guarded by the kernel. at least i see crash in _start when the dynamic linker (which has bti marking) transfers control to it and the start code has no bti c. (according to strace the dynamic linker did not remap/mprotect the main exe with bti so i assume this is the kernel's doing) can somebody verify that the notes are checked on the executable too and not just on ld.so?