Sami Tolvanen 8924560094 cfi: Switch to -fsanitize=kcfi ...

Switch from Clang's original forward-edge control-flow integrity
implementation to -fsanitize=kcfi, which is better suited for the
kernel, as it doesn't require LTO, doesn't use a jump table that
requires altering function references, and won't break cross-module
function address equality.

Signed-off-by: Sami Tolvanen <[email protected]>
Reviewed-by: Kees Cook <[email protected]>
Tested-by: Kees Cook <[email protected]>
Tested-by: Nathan Chancellor <[email protected]>
Acked-by: Peter Zijlstra (Intel) <[email protected]>
Tested-by: Peter Zijlstra (Intel) <[email protected]>
Signed-off-by: Kees Cook <[email protected]>
Link: https://lore.kernel.org/r/[email protected]

2022-09-26 10:13:13 -07:00

..

atomic

locking/atomic: Add generic try_cmpxchg64 support

2022-05-18 00:08:27 +02:00

basic

randstruct: Move seed generation into scripts/basic/

2022-05-08 01:33:07 -07:00

clang-tools

scripts/clang-tools: Remove DeprecatedOrUnsafeBufferHandling check

2022-08-21 02:47:49 +09:00

coccinelle

update Coccinelle URL

2022-08-07 21:30:36 +02:00

dtc

h8300: remove stale bindings and symlink

2022-05-20 22:40:56 +02:00

dummy-tools

kbuild: dummy-tools: pretend we understand __LONG_DOUBLE_128__

2022-08-21 02:47:48 +09:00

gcc-plugins

treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_385.RULE

2022-06-10 14:51:36 +02:00

gdb

Merge tag 'mm-nonmm-stable-2022-08-06-2' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2022-08-07 10:03:24 -07:00

genksyms

genksyms: adjust the output format to modpost

2022-05-24 16:33:20 +09:00

kconfig

kconfig: Qt5: tell the user which packages are required

2022-07-27 21:18:00 +09:00

ksymoops

…

mod

modpost: fix module versioning when a symbol lacks valid CRC

2022-08-21 02:47:36 +09:00

package

kbuild: rpm-pkg: fix build error when _arch is undefined

2022-07-27 21:18:00 +09:00

selinux

selinux: declare data arrays const

2022-05-03 15:53:49 -04:00

tracing

scripts/tracing: Fix typo 'the the' in comment

2022-08-02 15:17:00 -04:00

.gitignore

certs: move scripts/extract-cert to certs/

2022-01-08 18:28:21 +09:00

adjust_autoksyms.sh

kbuild: split the second line of *.mod into *.usyms

2022-05-08 03:16:59 +09:00

as-version.sh

kbuild: Switch to 'f' variants of integrated assembler flag

2021-09-03 08:17:20 +09:00

asn1_compiler.c

…

bin2c.c

…

bloat-o-meter

scripts/bloat-o-meter: add -p argument

2022-07-17 17:31:40 -07:00

bootgraph.pl

…

bpf_doc.py

bpf, docs: Use SPDX license identifier in bpf_doc.py

2022-07-22 00:28:14 +02:00

cc-can-link.sh

…

cc-version.sh

kbuild: collect minimum tool versions into scripts/min-tool-version.sh

2021-04-25 05:14:26 +09:00

check_extable.sh

scripts: check_extable: fix typo in user error message

2021-09-08 11:50:28 -07:00

check-local-export

scripts/check-local-export: avoid 'wait $!' for process substitution

2022-06-10 03:47:13 +09:00

check-sysctl-docs

…

checkdeclares.pl

scripts: make some scripts executable

2021-08-10 09:13:25 +09:00

checkincludes.pl

…

checkkconfigsymbols.py

checkkconfigsymbols.py: Remove skipping of help lines in parse_kconfig_file

2021-09-19 10:13:03 +09:00

checkpatch.pl

checkpatch: fix incorrect camelcase detection on numeric constant

2022-06-16 19:58:22 -07:00

checkstack.pl

checkstack: add riscv support for scripts/checkstack.pl

2022-07-27 21:18:00 +09:00

checksyscalls.sh

checksyscalls: ignore -Wunused-macros

2022-05-08 03:16:59 +09:00

checkversion.pl

scripts: checkversion: modernize linux/version.h search strings

2021-08-05 20:55:39 +09:00

cleanfile

…

cleanpatch

…

coccicheck

scripts: coccicheck: fix troubles on non-English builds

2021-05-18 11:09:59 +02:00

config

kconfig: config script: add a little user help

2021-01-04 10:38:11 +09:00

const_structs.checkpatch

const_structs.checkpatch: add frequently used ops structs

2022-01-20 08:52:54 +02:00

decode_stacktrace.sh

scripts/decode_stacktrace.sh: support old bash version

2022-04-29 14:37:57 -07:00

decodecode

scripts/decodecode: fix faulting instruction no print when opps.file is DOS format

2021-11-06 13:30:32 -07:00

depmod.sh

depmod: handle the case of /sbin/depmod without /sbin in PATH

2021-01-01 12:26:39 -08:00

dev-needs.sh

scripts/dev-needs: Add script to list device dependencies

2020-09-04 18:19:37 +02:00

diffconfig

scripts: switch explicitly to Python 3

2021-01-22 06:34:44 +09:00

documentation-file-ref-check

scripts: documentation-file-ref-check: fix bpf selftests path

2021-10-26 09:42:29 -06:00

export_report.pl

…

extract_xc3028.pl

…

extract-ikconfig

…

extract-module-sig.pl

…

extract-sys-certs.pl

…

extract-vmlinux

…

faddr2line

scripts/faddr2line: Add CONFIG_DEBUG_INFO check

2022-08-02 22:08:17 +02:00

file-size.sh

…

find-unused-docs.sh

…

gcc-ld

…

gcc-x86_32-has-stack-protector.sh

x86/stackprotector/32: Make the canary into a regular percpu variable

2021-03-08 13:19:05 +01:00

gcc-x86_64-has-stack-protector.sh

…

gen_autoksyms.sh

kbuild: Ignore __this_module in gen_autoksyms.sh

2022-06-26 06:15:05 +09:00

gen_ksymdeps.sh

kbuild: redo fake deps at include/ksym/*.h

2021-09-03 08:17:21 +09:00

gen-randstruct-seed.sh

randstruct: Move seed generation into scripts/basic/

2022-05-08 01:33:07 -07:00

generate_initcall_order.pl

init: lto: ensure initcall ordering

2021-01-14 08:21:09 -08:00

get_abi.pl

scripts/get_abi: Fix wrong script file name in the help message

2022-04-24 10:38:44 +02:00

get_dvb_firmware

…

get_feat.pl

scripts: get_feat.pl: use /usr/bin/env to find perl

2022-06-30 12:22:17 -06:00

get_maintainer.pl

get_maintainer: Honor mailmap for in file emails

2022-04-29 14:38:00 -07:00

gfp-translate

…

headerdep.pl

…

headers_install.sh

scripts: headers_install.sh: Update config leak ignore entries

2022-07-27 21:18:00 +09:00

insert-sys-cert.c

…

install.sh

kbuild: factor out the common installation code into scripts/install.sh

2022-05-11 21:45:53 +09:00

jobserver-exec

scripts/jobserver-exec: Fix a typo ("envirnoment")

2021-05-17 12:10:03 +09:00

kallsyms.c

scripts/kallsyms: Ignore __kcfi_typeid_

2022-09-26 10:13:12 -07:00

Kbuild.include

kbuild: add cmd_and_savecmd macro

2022-06-01 23:07:29 +09:00

Kconfig.include

kbuild: set EXIT trap before creating temporary directory

2022-08-03 22:56:38 +09:00

kernel-doc

scripts: kernel-doc: Always increment warnings counter

2022-06-13 11:07:45 -06:00

ld-version.sh

kbuild: collect minimum tool versions into scripts/min-tool-version.sh

2021-04-25 05:14:26 +09:00

leaking_addresses.pl

leaking_addresses: Always print a trailing newline

2021-10-15 11:25:13 +02:00

Lindent

…

link-vmlinux.sh

kbuild: factor out the common objtool arguments

2022-06-05 06:20:57 +09:00

Makefile

kbuild: Allow kernel installation packaging to override pkg-config

2022-04-05 17:03:31 +09:00

Makefile.asm-generic

kbuild: prefix $(srctree)/ to some included Makefiles

2021-03-15 19:20:48 +09:00

Makefile.build

kbuild: remove sed command from cmd_ar_builtin

2022-07-27 21:17:59 +09:00

Makefile.clang

um: Allow builds with Clang

2022-03-21 08:13:03 -07:00

Makefile.clean

kbuild: drop $(objtree)/ prefix support for clean-files

2022-05-08 03:17:00 +09:00

Makefile.compiler

kbuild: set EXIT trap before creating temporary directory

2022-08-03 22:56:38 +09:00

Makefile.debug

kbuild: split DEBUG_CFLAGS out to scripts/Makefile.debug

2021-10-24 13:48:33 +09:00

Makefile.dtbinst

kbuild: prefix $(srctree)/ to some included Makefiles

2021-03-15 19:20:48 +09:00

Makefile.extrawarn

Makefile.extrawarn: re-enable -Wformat for clang; take 2

2022-09-04 11:15:50 -07:00

Makefile.gcc-plugins

gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file

2022-08-16 12:25:53 -07:00

Makefile.headersinst

kbuild: prefix $(srctree)/ to some included Makefiles

2021-03-15 19:20:48 +09:00

Makefile.host

…

Makefile.kasan

kasan: always respect CONFIG_KASAN_STACK

2021-09-24 16:13:35 -07:00

Makefile.kcov

…

Makefile.kcsan

kcsan: Ignore GCC 11+ warnings about TSan runtime support

2021-12-09 16:42:27 -08:00

Makefile.lib

x86/retbleed: Add fine grained Kconfig knobs

2022-06-29 17:43:41 +02:00

Makefile.modfinal

kbuild: do not create *.prelink.o for Clang LTO or IBT

2022-05-29 18:39:35 +09:00

Makefile.modinst

kbuild: error out if $(INSTALL_MOD_PATH) contains % or :

2022-07-27 21:18:00 +09:00

Makefile.modpost

kbuild: do not create *.prelink.o for Clang LTO or IBT

2022-05-29 18:39:35 +09:00

Makefile.package

kbuild: rpm-pkg: pass 'linux' to --target option of rpmbuild

2022-07-27 21:18:00 +09:00

Makefile.randstruct

randstruct: Enable Clang support

2022-05-08 01:33:07 -07:00

Makefile.ubsan

ubsan: remove CONFIG_UBSAN_OBJECT_SIZE

2022-01-20 08:52:55 +02:00

Makefile.userprogs

…

Makefile.vmlinux

kbuild: link symbol CRCs at final link, removing CONFIG_MODULE_REL_CRCS

2022-05-24 16:33:20 +09:00

Makefile.vmlinux_o

x86/retbleed: Add fine grained Kconfig knobs

2022-06-29 17:43:41 +02:00

makelst

…

markup_oops.pl

…

min-tool-version.sh

scripts/min-tool-version.sh: raise minimum clang version to 14.0.0 for s390

2022-05-17 15:16:29 +02:00

mkcompile_h

sched/preempt: Tell about PREEMPT_DYNAMIC on kernel headers

2022-03-11 15:36:35 +01:00

mksysmap

…

mkuboot.sh

…

module.lds.S

cfi: Switch to -fsanitize=kcfi

2022-09-26 10:13:13 -07:00

modules-check.sh

kbuild: check module name conflict for external modules as well

2021-04-25 05:22:42 +09:00

nsdeps

scripts/nsdeps: adjust to the format change of *.mod files

2022-06-08 20:14:13 +09:00

objdiff

kbuild: clean .tmp_* pattern by make clean

2022-06-05 06:20:57 +09:00

objdump-func

scripts: Create objdump-func helper script

2022-05-12 10:08:43 -07:00

pahole-flags.sh

scripts/pahole-flags.sh: Parse DWARF and generate BTF with multithreading.

2022-02-22 14:32:44 -08:00

pahole-version.sh

kbuild: Add CONFIG_PAHOLE_VERSION

2022-02-02 11:19:33 +01:00

parse-maintainers.pl

…

patch-kernel

…

profile2linkerlist.pl

…

prune-kernel

scripts/prune-kernel: Use kernel-install if available

2022-05-11 21:46:38 +09:00

recordmcount.c

ftrace: Have recordmcount use w8 to read relp->r_info in arm64_is_fake_mcount

2021-03-02 17:27:18 -05:00

recordmcount.h

recordmcount: Correct st_shndx handling

2021-06-18 09:09:17 -04:00

recordmcount.pl

nds32: Remove the architecture

2022-03-07 13:54:59 +01:00

remove-stale-files

Merge tag 'riscv-for-linus-5.20-mw2' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

2022-08-12 18:39:43 -07:00

setlocalversion

kbuild: do not quote string values in include/config/auto.conf

2022-01-08 18:03:57 +09:00

show_delta

tweewide: Fix most Shebang lines

2020-12-08 23:30:04 +09:00

sign-file.c

sign-file: Fix confusing error messages

2022-08-03 23:56:20 +03:00

sorttable.c

LoongArch: Add ELF-related definitions

2022-06-03 20:09:27 +08:00

sorttable.h

script/sorttable: Fix some initialization problems

2022-01-18 10:17:18 -05:00

spdxcheck-test.sh

docs: move Linux logo into a new images folder

2022-06-01 09:32:45 -06:00

spdxcheck.py

scripts/spdxcheck: Put excluded files and directories into a separate file

2022-05-18 15:34:33 +02:00

spdxexclude

scripts/spdxcheck: Exclude top-level README

2022-05-18 15:35:42 +02:00

spelling.txt

scripts/spelling.txt: add more spellings to spelling.txt

2022-03-22 15:57:00 -07:00

sphinx-pre-install

scripts: sphinx-pre-install: place a warning for Sphinx >= 3.0

2022-07-07 12:47:34 -06:00

split-man.pl

tweewide: Fix most Shebang lines

2020-12-08 23:30:04 +09:00

stackdelta

…

stackusage

…

subarch.include

LoongArch: Add build infrastructure

2022-06-03 20:09:27 +08:00

syscallhdr.sh

scripts: check duplicated syscall number in syscall table

2021-07-09 04:00:39 +09:00

syscallnr.sh

scripts: make some scripts executable

2021-08-10 09:13:25 +09:00

syscalltbl.sh

scripts: check duplicated syscall number in syscall table

2021-07-09 04:00:39 +09:00

tags.sh

scripts/tags.sh: Include tools directory in tags generation

2022-07-01 10:32:30 +02:00

test_fortify.sh

fortify: Update compile-time tests for Clang 14

2022-02-13 16:50:06 -08:00

tools-support-relr.sh

Makefile: fix GDB warning with CONFIG_RELR

2021-06-08 13:09:34 +01:00

unifdef.c

…

ver_linux

Removed the oprofiled version option

2021-05-03 17:23:06 -06:00

xen-hypercalls.sh

scripts: make some scripts executable

2021-08-10 09:13:25 +09:00

xz_wrap.sh

…