linux-toradex.git/arch/x86/include/asm/livepatch.h, branch v4.4.142

livepatch: x86: make kASLR logic more accurate

2015-04-29T14:51:33+00:00

We give up old_addr hint from the coming patch module in cases when kernel load
base has been randomized (as in such case, the coming module has no idea about
the exact randomization offset).

We are currently too pessimistic, and give up immediately as soon as
CONFIG_RANDOMIZE_BASE is set; this doesn't however directly imply that the
load base has actually been randomized. There are config options that
disable kASLR (such as hibernation), user could have disabled kaslr on
kernel command-line, etc.

The loader propagates the information whether kernel has been randomized
through bootparams. This allows us to have the condition more accurate.

On top of that, it seems unnecessary to give up old_addr hints even if
randomization is active. The relocation offset can be computed using
kaslr_ofsset(), and therefore old_addr can be adjusted accordingly.

Acked-by: Josh Poimboeuf 
Signed-off-by: Jiri Kosina

livepatch: remove extern specifier from header files

2015-02-18T19:50:05+00:00

Storage-class specifier 'extern' is redundant in front of the function
declaration. According to the C specification it has the same meaning as
if not present at all. So remove it.

Signed-off-by: Miroslav Benes 
Acked-by: Josh Poimboeuf 
Reviewed-by: Masami Hiramatsu 
Signed-off-by: Jiri Kosina

livepatch: rename config to CONFIG_LIVEPATCH

2015-02-04T10:25:51+00:00

Rename CONFIG_LIVE_PATCHING to CONFIG_LIVEPATCH to make the naming of
the config and the code more consistent.

Signed-off-by: Josh Poimboeuf 
Reviewed-by: Jingoo Han 
Signed-off-by: Jiri Kosina

livepatch: handle ancient compilers with more grace

2015-01-09T09:55:10+00:00

We are aborting a build in case when gcc doesn't support fentry on x86_64
(regs->ip modification can't really reliably work with mcount).

This however breaks allmodconfig for people with older gccs that don't
support -mfentry.

Turn the build-time failure into runtime failure, resulting in the whole
infrastructure not being initialized if CC_USING_FENTRY is unset.

Reported-by: Andrew Morton 
Signed-off-by: Jiri Kosina 
Signed-off-by: Andrew Morton 
Acked-by: Josh Poimboeuf

livepatch: move x86 specific ftrace handler code to arch/x86

2014-12-22T14:40:49+00:00

The execution flow redirection related implemention in the livepatch
ftrace handler is depended on the specific architecture. This patch
introduces klp_arch_set_pc(like kgdb_arch_set_pc) interface to change
the pt_regs.

Signed-off-by: Li Bin 
Acked-by: Josh Poimboeuf 
Signed-off-by: Jiri Kosina

livepatch: kernel: add support for live patching

2014-12-22T14:40:49+00:00

This commit introduces code for the live patching core.  It implements
an ftrace-based mechanism and kernel interface for doing live patching
of kernel and kernel module functions.

It represents the greatest common functionality set between kpatch and
kgraft and can accept patches built using either method.

This first version does not implement any consistency mechanism that
ensures that old and new code do not run together.  In practice, ~90% of
CVEs are safe to apply in this way, since they simply add a conditional
check.  However, any function change that can not execute safely with
the old version of the function can _not_ be safely applied in this
version.

[ jkosina@suse.cz: due to the number of contributions that got folded into
  this original patch from Seth Jennings, add SUSE's copyright as well, as
  discussed via e-mail ]

Signed-off-by: Seth Jennings 
Signed-off-by: Josh Poimboeuf 
Reviewed-by: Miroslav Benes 
Reviewed-by: Petr Mladek 
Reviewed-by: Masami Hiramatsu 
Signed-off-by: Miroslav Benes 
Signed-off-by: Petr Mladek 
Signed-off-by: Jiri Kosina