| .. | .. |
|---|
| 13 | 13 | * On x86_64, %gs is shared by percpu area and stack canary. All |
|---|
| 14 | 14 | * percpu symbols are zero based and %gs points to the base of percpu |
|---|
| 15 | 15 | * area. The first occupant of the percpu area is always |
|---|
| 16 | | - * irq_stack_union which contains stack_canary at offset 40. Userland |
|---|
| 16 | + * fixed_percpu_data which contains stack_canary at offset 40. Userland |
|---|
| 17 | 17 | * %gs is always saved and restored on kernel entry and exit using |
|---|
| 18 | 18 | * swapgs, so stack protector doesn't add any complexity there. |
|---|
| 19 | 19 | * |
|---|
| .. | .. |
|---|
| 65 | 65 | */ |
|---|
| 66 | 66 | static __always_inline void boot_init_stack_canary(void) |
|---|
| 67 | 67 | { |
|---|
| 68 | | - u64 canary; |
|---|
| 68 | + u64 canary = 0; |
|---|
| 69 | 69 | u64 tsc; |
|---|
| 70 | 70 | |
|---|
| 71 | 71 | #ifdef CONFIG_X86_64 |
|---|
| 72 | | - BUILD_BUG_ON(offsetof(union irq_stack_union, stack_canary) != 40); |
|---|
| 72 | + BUILD_BUG_ON(offsetof(struct fixed_percpu_data, stack_canary) != 40); |
|---|
| 73 | 73 | #endif |
|---|
| 74 | 74 | /* |
|---|
| 75 | 75 | * We both use the random pool and the current TSC as a source |
|---|
| 76 | 76 | * of randomness. The TSC only matters for very early init, |
|---|
| 77 | 77 | * there it already has some randomness on most systems. Later |
|---|
| 78 | 78 | * on during the bootup the random pool has true entropy too. |
|---|
| 79 | + * For preempt-rt we need to weaken the randomness a bit, as |
|---|
| 80 | + * we can't call into the random generator from atomic context |
|---|
| 81 | + * due to locking constraints. We just leave canary |
|---|
| 82 | + * uninitialized and use the TSC based randomness on top of it. |
|---|
| 79 | 83 | */ |
|---|
| 84 | +#ifndef CONFIG_PREEMPT_RT |
|---|
| 80 | 85 | get_random_bytes(&canary, sizeof(canary)); |
|---|
| 86 | +#endif |
|---|
| 81 | 87 | tsc = rdtsc(); |
|---|
| 82 | 88 | canary += tsc + (tsc << 32UL); |
|---|
| 83 | 89 | canary &= CANARY_MASK; |
|---|
| 84 | 90 | |
|---|
| 85 | 91 | current->stack_canary = canary; |
|---|
| 86 | 92 | #ifdef CONFIG_X86_64 |
|---|
| 87 | | - this_cpu_write(irq_stack_union.stack_canary, canary); |
|---|
| 93 | + this_cpu_write(fixed_percpu_data.stack_canary, canary); |
|---|
| 88 | 94 | #else |
|---|
| 89 | 95 | this_cpu_write(stack_canary.canary, canary); |
|---|
| 96 | +#endif |
|---|
| 97 | +} |
|---|
| 98 | + |
|---|
| 99 | +static inline void cpu_init_stack_canary(int cpu, struct task_struct *idle) |
|---|
| 100 | +{ |
|---|
| 101 | +#ifdef CONFIG_X86_64 |
|---|
| 102 | + per_cpu(fixed_percpu_data.stack_canary, cpu) = idle->stack_canary; |
|---|
| 103 | +#else |
|---|
| 104 | + per_cpu(stack_canary.canary, cpu) = idle->stack_canary; |
|---|
| 90 | 105 | #endif |
|---|
| 91 | 106 | } |
|---|
| 92 | 107 | |
|---|
| .. | .. |
|---|
| 119 | 134 | static inline void setup_stack_canary_segment(int cpu) |
|---|
| 120 | 135 | { } |
|---|
| 121 | 136 | |
|---|
| 137 | +static inline void cpu_init_stack_canary(int cpu, struct task_struct *idle) |
|---|
| 138 | +{ } |
|---|
| 139 | + |
|---|
| 122 | 140 | static inline void load_stack_canary_segment(void) |
|---|
| 123 | 141 | { |
|---|
| 124 | 142 | #ifdef CONFIG_X86_32 |
|---|