linux-toradex.git/drivers/misc/lkdtm.c, branch v3.13

lkdtm: add tests for additional page permissions

2013-10-29T23:13:39+00:00

Testing execution and access of userspace from the kernel is needed for
validating things like Intel's SMEP and SMAP protections. Additionally,
add an explicit test for validating that RO page permissions have been
set for the RO data area.

Signed-off-by: Kees Cook 
Signed-off-by: Greg Kroah-Hartman

lkdtm: adjust recursion size to avoid warnings

2013-10-29T23:13:39+00:00

When CONFIG_FRAME_WARN is set low (e.g. some ARM builds), the hard-coded
stack buffer size used for kernel stack over run testing triggers build
warnings. Instead, avoid the warning by recalcuating the buffer size and
recursion count needed to trigger the test. Also uses the recursion counter
indirectly to avoid changing the parameter during the test.

Signed-off-by: Kees Cook 
Signed-off-by: Greg Kroah-Hartman

lkdtm: isolate stack corruption test

2013-10-25T05:21:00+00:00

When tests were added to lkdtm that grew the stack frame, the stack
corruption test stopped working. This isolates the test in its own
function, and forces it not to be inlined.

Signed-off-by: Kees Cook 
Fixes: cc33c537c12f ("lkdtm: add "EXEC_*" triggers")
Cc: stable  # 3.12
Signed-off-by: Greg Kroah-Hartman

lkdtm: add "EXEC_*" triggers

2013-07-25T05:47:20+00:00

Add new crash locations that attempt to execute non-executable memory
regions (data segment, stack, kmalloc, vmalloc).

Signed-off-by: Kees Cook 
Signed-off-by: Greg Kroah-Hartman

lkdtm: add "SPINLOCKUP" trigger

2013-07-25T05:47:20+00:00

For additional lockup testing, add "SPINLOCKUP" to trigger a spinlock
deadlock when triggered twice.

Signed-off-by: Kees Cook 
Signed-off-by: Greg Kroah-Hartman

lkdtm: add "WARNING" trigger

2013-07-25T05:47:19+00:00

For additional testing, add "WARNING" as a trigger that calls WARN_ON(1).

Signed-off-by: Kees Cook 
Signed-off-by: Greg Kroah-Hartman

lkdtm: fix stack protector trigger

2013-07-25T05:47:19+00:00

The -fstack-protector compiler flag will only build stack protections if
a character array is seen. Additionally, the offset to the saved
instruction pointer changes based on architecture, so stomp much harder
(64 bytes) when corrupting the stack.

Signed-off-by: Kees Cook 
Signed-off-by: Greg Kroah-Hartman

drivers/misc/lkdtm.c: fix missing allocation failure check

2012-07-31T00:25:22+00:00

Addresses https://bugzilla.kernel.org/show_bug.cgi?id=44691

Reported-by: 
Signed-off-by: Alan Cox 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

lkdtm: avoid calling lkdtm_do_action() with spinlock held

2012-02-04T00:16:41+00:00

lkdtm_do_action() may call sleeping functions like kmalloc(), so do not
call it with spin lock held.

Signed-off-by: WANG Cong 
Cc: Prarit Bhargava 
Cc: Arnd Bergmann 
Cc: Greg Kroah-Hartman 
Reviewed-by: Dave Young 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

drivers/misc/lkdtm.c: fix race when crashpoint is hit multiple times before checking count

2011-06-28T01:00:13+00:00

We observed the crash point count going negative in cases where the
crash point is hit multiple times before the check of "count == 0" is
done.  Because of this we never call lkdtm_do_action().  This patch just
adds a spinlock to protect count.

Reported-by: Tapan Dhimant 
Signed-off-by: Josh Hunt 
Acked-by: Ankita Garg 
Cc: 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds