Changes in Makefile

2335c9cb - ARM: 9407/1: Add support for STACKLEAK gcc plugin

Thu, 27 Jun 2024 07:38:44 +0000

ARM: 9407/1: Add support for STACKLEAK gcc pluginAdd the STACKLEAK gcc plugin to arm32 by adding the helper used bystackleak common code: on_thread_stack(). It initialize the stack with thepoison value before returning from system calls which improves the kernelsecurity. Additionally, this disables the plugin in EFI stub code anddecompress code, which are out of scope for the protection.Before the test on Qemu versatilepb board: # echo STACKLEAK_ERASING > /sys/kernel/debug/provoke-crash/DIRECT lkdtm: Performing direct entry STACKLEAK_ERASING lkdtm: XFAIL: stackleak is not supported on this arch (HAVE_ARCH_STACKLEAK=n)After: # echo STACKLEAK_ERASING > /sys/kernel/debug/provoke-crash/DIRECT lkdtm: Performing direct entry STACKLEAK_ERASING lkdtm: stackleak stack usage: high offset: 80 bytes current: 280 bytes lowest: 696 bytes tracked: 696 bytes untracked: 192 bytes poisoned: 7220 bytes low offset: 4 bytes lkdtm: OK: the rest of the thread stack is properly erasedSigned-off-by: Jinjie Ruan Acked-by: Ard Biesheuvel Reviewed-by: Linus Walleij Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

7f7f6f7a - Makefile: remove redundant tool coverage variables

Mon, 06 May 2024 13:35:43 +0000

Makefile: remove redundant tool coverage variablesNow Kbuild provides reasonable defaults for objtool, sanitizers, andprofilers.Remove redundant variables.Note:This commit changes the coverage for some objects: - include arch/mips/vdso/vdso-image.o into UBSAN, GCOV, KCOV - include arch/sparc/vdso/vdso-image-*.o into UBSAN - include arch/sparc/vdso/vma.o into UBSAN - include arch/x86/entry/vdso/extable.o into KASAN, KCSAN, UBSAN, GCOV, KCOV - include arch/x86/entry/vdso/vdso-image-*.o into KASAN, KCSAN, UBSAN, GCOV, KCOV - include arch/x86/entry/vdso/vdso32-setup.o into KASAN, KCSAN, UBSAN, GCOV, KCOV - include arch/x86/entry/vdso/vma.o into GCOV, KCOV - include arch/x86/um/vdso/vma.o into KASAN, GCOV, KCOVI believe these are positive effects because all of them are kernelspace objects.Signed-off-by: Masahiro Yamada Reviewed-by: Kees Cook Tested-by: Roberto Sassu List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

1881b4d6 - ARM: 9291/1: decompressor: simplify the path to the top vmlinux

Tue, 14 Mar 2023 07:43:51 +0000

ARM: 9291/1: decompressor: simplify the path to the top vmlinuxWith commit 8debed3efe3a ("kbuild: export top-level LDFLAGS_vmlinuxonly to scripts/Makefile.vmlinux") applied, we no longer see the errormessage while building the ARM zImage, but we do not have a good reasonto complicate the file path either.'$(obj)/../../../../vmlinux' is canonicalized to 'vmlinux'.Signed-off-by: Masahiro Yamada Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

a2faac39 - ARM: 9263/1: use .arch directives instead of assembler command line flags

Mon, 24 Oct 2022 19:44:41 +0000

ARM: 9263/1: use .arch directives instead of assembler command line flagsSimilar to commit a6c30873ee4a ("ARM: 8989/1: use .fpu assemblerdirectives instead of assembler arguments").GCC and GNU binutils support setting the "sub arch" via -march=,-Wa,-march, target function attribute, and .arch assembler directive.Clang was missing support for -Wa,-march=, but this was implemented inclang-13.The behavior of both GCC and Clang is toprefer -Wa,-march= over -march= for assembler and assembler-with-cppsources, but Clang will warn about the -march= being unused.clang: warning: argument unused during compilation: '-march=armv6k'[-Wunused-command-line-argument]Since most assembler is non-conditionally assembled with one sub arch(modulo arch/arm/delay-loop.S which conditionally is assembled as armv4based on CONFIG_ARCH_RPC, and arch/arm/mach-at91/pm-suspend.S which isconditionally assembled as armv7-a based on CONFIG_CPU_V7), prefer the.arch assembler directive.Add a few more instances found in compile testing as found by Arnd andNathan.Link: https://github.com/llvm/llvm-project/commit/1d51c699b9e2ebc5bcfdbe85c74cc871426333d4Link: https://bugs.llvm.org/show_bug.cgi?id=48894Link: https://github.com/ClangBuiltLinux/linux/issues/1195Link: https://github.com/ClangBuiltLinux/linux/issues/1315Suggested-by: Arnd Bergmann Suggested-by: Nathan Chancellor Signed-off-by: Arnd Bergmann Tested-by: Nathan Chancellor Signed-off-by: Nick Desaulniers Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

d539fee9 - ARM: 9253/1: ubsan: select ARCH_HAS_UBSAN_SANITIZE_ALL

Fri, 30 Sep 2022 21:30:09 +0000

ARM: 9253/1: ubsan: select ARCH_HAS_UBSAN_SANITIZE_ALLTo enable UBSAN on ARM, this patch enables ARCH_HAS_UBSAN_SANITIZE_ALLfrom arm confiuration. Basic kernel bootup test is passed on arm withCONFIG_UBSAN_SANITIZE_ALL enabled.[florian: rebased against v6.0-rc7]Signed-off-by: Seung-Woo Kim Signed-off-by: Florian Fainelli Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

e1789d7c - kbuild: upgrade the orphan section warning to an error if CONFIG_WERROR is set

Tue, 25 Oct 2022 07:30:23 +0000

kbuild: upgrade the orphan section warning to an error if CONFIG_WERROR is setAndrew Cooper suggested upgrading the orphan section warning to a hard linkerror. However Nathan Chancellor said outright turning the warning into anerror with no escape hatch might be too aggressive, as we have had thesewarnings triggered by new compiler generated sections, and suggested turningorphan sections into an error only if CONFIG_WERROR is set. Kees Cook echoedand emphasized that the mandate from Linus is that we should avoid breakingbuilds. It wrecks bisection, it causes problems across compiler versions, etc.Thus upgrade the orphan section warning to a hard link error only ifCONFIG_WERROR is set.Suggested-by: Andrew Cooper Suggested-by: Nathan Chancellor Signed-off-by: Xin Li Reviewed-by: Nathan Chancellor Tested-by: Nathan Chancellor Signed-off-by: Kees Cook Link: https://lore.kernel.org/r/20221025073023.16137-2-xin3.li@intel.com List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

9c6d6652 - ARM: 9189/1: decompressor: fix unneeded rebuilds of library objects

Thu, 31 Mar 2022 08:47:09 +0000

ARM: 9189/1: decompressor: fix unneeded rebuilds of library objectsSince commit 251cc826be7d ("ARM: 9154/1: decompressor: do not copy sourcefiles while building"), the following three are rebuilt every time. AS arch/arm/boot/compressed/lib1funcs.o AS arch/arm/boot/compressed/ashldi3.o AS arch/arm/boot/compressed/bswapsdi2.oMove the "OBJS += ..." line up so these objects are added to 'targets'.Fixes: 251cc826be7d ("ARM: 9154/1: decompressor: do not copy source files while building")Reported-by: Russell King (Oracle) Signed-off-by: Masahiro Yamada Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

7ce7e984 - kbuild: rename cmd_{bzip2,lzma,lzo,lz4,xzkern,zstd22}

Sun, 09 Jan 2022 18:15:27 +0000

kbuild: rename cmd_{bzip2,lzma,lzo,lz4,xzkern,zstd22}GZIP-compressed files end with 4 byte data that represents the sizeof the original input. The decompressors (the self-extracting kernel)exploit it to know the vmlinux size beforehand. To mimic the GZIP'strailer, Kbuild provides cmd_{bzip2,lzma,lzo,lz4,xzkern,zstd22}.Unfortunately these macros are used everywhere despite the appendedsize data is only useful for the decompressors.There is no guarantee that such hand-crafted trailers are safely ignored.In fact, the kernel refuses compressed initramdfs with the garbage data.That is why usr/Makefile overrides size_append to make it no-op.To limit the use of such broken compressed files, this commit renamesthe existing macros as follows: cmd_bzip2 --> cmd_bzip2_with_size cmd_lzma --> cmd_lzma_with_size cmd_lzo --> cmd_lzo_with_size cmd_lz4 --> cmd_lz4_with_size cmd_xzkern --> cmd_xzkern_with_size cmd_zstd22 --> cmd_zstd22_with_sizeTo keep the decompressors working, I updated the following Makefilesaccordingly: arch/arm/boot/compressed/Makefile arch/h8300/boot/compressed/Makefile arch/mips/boot/compressed/Makefile arch/parisc/boot/compressed/Makefile arch/s390/boot/compressed/Makefile arch/sh/boot/compressed/Makefile arch/x86/boot/compressed/MakefileI reused the current macro names for the normal usecases; they producethe compressed data in the proper format.I did not touch the following: arch/arc/boot/Makefile arch/arm64/boot/Makefile arch/csky/boot/Makefile arch/mips/boot/Makefile arch/riscv/boot/Makefile arch/sh/boot/Makefile kernel/MakefileThis means those Makefiles will stop appending the size data.I dropped the 'override size_append' hack from usr/Makefile.Signed-off-by: Masahiro Yamada Reviewed-by: Nicolas Schier List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

251cc826 - ARM: 9154/1: decompressor: do not copy source files while building

Sat, 30 Oct 2021 17:52:58 +0000

ARM: 9154/1: decompressor: do not copy source files while buildingAs commit 7ae4a78daacf ("ARM: 8969/1: decompressor: simplify libfdtbuilds") stated, copying source files during the build time may notend up with as clean code as expected.Do similar for the other library files for further cleanups of theMakefile and .gitignore.Signed-off-by: Masahiro Yamada Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

672513bf - ARM: decompressor: disable stack protector

Tue, 26 Oct 2021 08:23:31 +0000

ARM: decompressor: disable stack protectorEnabling the stack protector in the decompressor is of dubious value,given that it uses a fixed value for the canary, cannot print any outputunless CONFIG_DEBUG_LL is enabled (which relies on board specific buildtime settings), and is already disabled for a good chunk of the code(libfdt).So let's just disable it in the decompressor. This will make it easierin the future to manage the command line options that would need to beremoved again in this context for the TLS register based stackprotector.Signed-off-by: Ard Biesheuvel List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

b30d0289 - ARM: 9105/1: atags_to_fdt: don't warn about stack size

Mon, 09 Aug 2021 18:07:30 +0000

ARM: 9105/1: atags_to_fdt: don't warn about stack sizeThe merge_fdt_bootargs() function by definition consumes more than 1024bytes of stack because it has a 1024 byte command line on the stack,meaning that we always get a warning when building this file:arch/arm/boot/compressed/atags_to_fdt.c: In function 'merge_fdt_bootargs':arch/arm/boot/compressed/atags_to_fdt.c:98:1: warning: the frame size of 1032 bytes is larger than 1024 bytes [-Wframe-larger-than=]However, as this is the decompressor and we know that it has a very shallowcall chain, and we do not actually risk overflowing the kernel stackat runtime here.This just shuts up the warning by disabling the warning flag for thisfile.Tested on Nexus 7 2012 builds.Acked-by: Nicolas Pitre Signed-off-by: David Heidelberg Signed-off-by: Arnd Bergmann Cc: Signed-off-by: Russell King (Oracle) List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

331f5f63 - ARM: 9076/1: boot: remove redundant piggy_data from clean-files

Sat, 24 Apr 2021 16:00:07 +0000

ARM: 9076/1: boot: remove redundant piggy_data from clean-filesKbuild cleans up files listed in 'targets'.'piggy_data' is already added to 'targets' a few lines above.Adding it to 'clean-files' is redundant.Signed-off-by: Masahiro Yamada Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

1476fee5 - kbuild: add a script to remove stale generated files

Sun, 25 Apr 2021 07:07:12 +0000

kbuild: add a script to remove stale generated filesWe maintain .gitignore and Makefiles so build artifacts are properlyignored by Git, and cleaned up by 'make clean'. However, the code isalways changing; generated files are often moved to another directory,or removed when they become unnecessary. Such garbage files tend to beleft over in the source tree because people usually git-pull withoutcleaning the tree.This is not only the noise for 'git status', but also a build issuein some cases.One solution is to remove a stale file like commit 223c24a7dba9 ("kbuild:Automatically remove stale file") did. Such workaroundshould be removed after a while, but we forget about that if we scatterthe workaround code in random places.So, this commit adds a new script to collect cleanings of stale files.As a start point, move the code in arch/arm/boot/compressed/Makefileinto this script.Signed-off-by: Masahiro Yamada List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

c4e792d1 - ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld

Fri, 05 Feb 2021 18:23:00 +0000

ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lldThe LLVM ld.lld linker uses a different symbol type for __bss_start,resulting in the calculation of KBSS_SZ to be thrown off. Up until now,this has gone unnoticed as it only affects the appended DTB case, butpending changes for ARM in the way the decompressed kernel is cleanedfrom the caches has uncovered this problem.On a ld.lld build: $ nm vmlinux |grep bss_ c1c22034 D __bss_start c1c86e98 B __bss_stopresulting in $ readelf -s arch/arm/boot/compressed/vmlinux | grep bss_size 433: c1c86e98 0 NOTYPE GLOBAL DEFAULT ABS _kernel_bss_sizewhich is obviously incorrect, and may cause the cache clean to accessunmapped memory, or cause the size calculation to wrap, resulting in nocache clean to be performed at all.Fix this by updating the sed regex to take D type symbols into account.Link: https://lore.kernel.org/linux-arm-kernel/6c65bcef-d4e7-25fa-43cf-2c435bb61bb9@collabora.com/Link: https://lore.kernel.org/linux-arm-kernel/20210205085220.31232-1-ardb@kernel.org/Cc: # v4.19+Reviewed-by: Nick Desaulniers Tested-by: Nick Desaulniers Reported-by: Guillaume Tucker Reported-by: "kernelci.org bot" Signed-off-by: Ard Biesheuvel Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

0673cb38 - ARM: 9045/1: uncompress: Validate start of physical memory against passed DTB

Mon, 04 Jan 2021 13:00:52 +0000

ARM: 9045/1: uncompress: Validate start of physical memory against passed DTBCurrently, the start address of physical memory is obtained by maskingthe program counter with a fixed mask of 0xf8000000. This mask valuewas chosen as a balance between the requirements of different platforms.However, this does require that the start address of physical memory isa multiple of 128 MiB, precluding booting Linux on platforms where thisrequirement is not fulfilled.Fix this limitation by validating the masked address against the memoryinformation in the passed DTB. Only use the start addressfrom DTB when masking would yield an out-of-range address, prefer thetraditional method in all other cases. Note that this applies only to theexplicitly passed DTB on modern systems, and not to a DTB appended tothe kernel, or to ATAGS. The appended DTB may need to be augmented byinformation from ATAGS, which may need to rely on knowledge of the startaddress of physical memory itself.This allows to boot Linux on r7s9210/rza2mevb using the 64 MiB of SDRAMon the RZA2MEVB sub board, which is located at 0x0C000000 (CS3 space),i.e. not at a multiple of 128 MiB.Suggested-by: Nicolas Pitre Suggested-by: Ard Biesheuvel Signed-off-by: Geert Uytterhoeven Reviewed-by: Ard Biesheuvel Acked-by: Nicolas Pitre Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

59612b24 - kbuild: Hoist '--orphan-handling' into Kconfig

Thu, 19 Nov 2020 20:46:56 +0000

kbuild: Hoist '--orphan-handling' into KconfigCurrently, '--orphan-handling=warn' is spread out across four differentarchitectures in their respective Makefiles, which makes it a littleunruly to deal with in case it needs to be disabled for a specificlinker version (in this case, ld.lld 10.0.1).To make it easier to control this, hoist this warning into Kconfig andthe main Makefile so that disabling it is simpler, as the warning willonly be enabled in a couple places (main Makefile and a couple ofcompressed boot folders that blow away LDFLAGS_vmlinx) and making itconditional is easier due to Kconfig syntax. One small additionalbenefit of this is saving a call to ld-option on incremental buildsbecause we will have already evaluated it for CONFIG_LD_ORPHAN_WARN.To keep the list of supported architectures the same, introduceCONFIG_ARCH_WANT_LD_ORPHAN_WARN, which an architecture can select togain this automatically after all of the sections are specified and sizeasserted. A special thanks to Kees Cook for the help text on thisconfig.Link: https://github.com/ClangBuiltLinux/linux/issues/1187Acked-by: Kees Cook Acked-by: Michael Ellerman (powerpc)Reviewed-by: Nick Desaulniers Tested-by: Nick Desaulniers Signed-off-by: Nathan Chancellor Signed-off-by: Masahiro Yamada List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

d5d44e7e - ARM: 9013/2: Disable KASan instrumentation for some code

Sun, 25 Oct 2020 22:50:09 +0000

ARM: 9013/2: Disable KASan instrumentation for some codeDisable instrumentation for arch/arm/boot/compressed/*since that code is executed before the kernel has evenset up its mappings and definately out of scope forKASan.Disable instrumentation of arch/arm/vdso/* because that codeis not linked with the kernel image, so the KASan managementcode would fail to link.Disable instrumentation of arch/arm/mm/physaddr.c. See commitec6d06efb0ba ("arm64: Add support for CONFIG_DEBUG_VIRTUAL")for more details.Disable kasan check in the function unwind_pop_register becauseit does not matter that kasan checks failed when unwind_pop_register()reads the stack memory of a task.Cc: Andrey Ryabinin Cc: Alexander Potapenko Cc: Dmitry Vyukov Cc: kasan-dev@googlegroups.comReviewed-by: Ard Biesheuvel Tested-by: Ard Biesheuvel # QEMU/KVM/mach-virt/LPAE/8GTested-by: Florian Fainelli # Brahma SoCsTested-by: Ahmad Fatoum # i.MX6QReported-by: Florian Fainelli Reported-by: Marc Zyngier Signed-off-by: Abbott Liu Signed-off-by: Florian Fainelli Signed-off-by: Linus Walleij Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

adc5f702 - ARM: add malloc size to decompressor kexec size structure

Thu, 06 Aug 2020 09:32:33 +0000

ARM: add malloc size to decompressor kexec size structureAdd the required malloc size to the decompressor kexec size structure.Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

83dfeedb - ARM: add TEXT_OFFSET to decompressor kexec image structure

Tue, 03 Apr 2018 11:02:28 +0000

ARM: add TEXT_OFFSET to decompressor kexec image structureAdd the TEXT_OFFSET to the decompressor's kexec image structure tokexec knows what offset to use.Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile

2596a72d - ARM: 9009/1: uncompress: Enable debug in head.S

Fri, 04 Sep 2020 08:07:41 +0000

ARM: 9009/1: uncompress: Enable debug in head.SThe assembly file head.S includes some debug code that doesnot get enabled when we select CONFIG_DEBUG_UNCOMPRESS.The debug in head.S relies on the user tagging on -DDEBUGon the compilation command line.To simplify debugging, tag on -DDEBUG so that we also getthese debug messages when selecting CONFIG_DEBUG_UNCOMPRESS.Signed-off-by: Linus Walleij Signed-off-by: Russell King List of files: /linux-6.15/arch/arm/boot/compressed/Makefile