Alexei Starovoitov 28c486744e bpf: introduce BPF_JIT_ALWAYS_ON config ... [ upstream commit 290af86629b25ffd1ed6232c4e9107da031705cb ] The BPF interpreter has been used as part of the spectre 2 attack CVE-2017-5715. A quote from goolge project zero blog: "At this point, it would normally be necessary to locate gadgets in the host kernel code that can be used to actually leak data by reading from an attacker-controlled location, shifting and masking the result appropriately and then using the result of that as offset to an attacker-controlled address for a load. But piecing gadgets together and figuring out which ones work in a speculation context seems annoying. So instead, we decided to use the eBPF interpreter, which is built into the host kernel - while there is no legitimate way to invoke it from inside a VM, the presence of the code in the host kernel's text section is sufficient to make it usable for the attack, just like with ordinary ROP gadgets." To make attacker job harder introduce BPF_JIT_ALWAYS_ON config option that removes interpreter from the kernel in favor of JIT-only mode. So far eBPF JIT is supported by: x64, arm64, arm32, sparc64, s390, powerpc64, mips64 The start of JITed program is randomized and code page is marked as read-only. In addition "constant blinding" can be turned on with net.core.bpf_jit_harden v2->v3: - move __bpf_prog_ret0 under ifdef (Daniel) v1->v2: - fix init order, test_bpf and cBPF (Daniel's feedback) - fix offloaded bpf (Jakub's feedback) - add 'return 0' dummy in case something can invoke prog->bpf_func - retarget bpf tree. For bpf-next the patch would need one extra hunk. It will be sent when the trees are merged back to net-next Considered doing: int bpf_jit_enable __read_mostly = BPF_EBPF_JIT_DEFAULT; but it seems better to land the patch as-is and in bpf-next remove bpf_jit_enable global variable from all JITs, consolidate in one place and remove this jit_init() function. Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-02-03 17:04:24 +01:00
..
842	crypto: 842 - Add CRC and validation support	2015-10-14 22:23:17 +08:00
fonts
lz4	lib: lz4: fixed zram with lz4 on big endian machines	2016-05-04 14:48:41 -07:00
lzo
mpi	lib/mpi: call cond_resched() from mpi_powm() loop	2017-11-30 08:37:19 +00:00
raid6	md/raid6: delta syndrome for ARM NEON	2015-08-31 19:29:05 +02:00
reed_solomon
xz
zlib_deflate	zlib_deflate/deftree: remove bi_reverse()	2015-09-10 13:29:01 -07:00
zlib_inflate
.gitignore
argv_split.c
asn1_decoder.c	ASN.1: check for error from ASN1_OP_END__ACT actions	2017-12-16 10:33:48 +01:00
assoc_array.c	assoc_array: Fix a buggy node-splitting case	2017-11-02 09:40:49 +01:00
atomic64.c	atomic: Provide atomic_{or,xor,and}	2015-07-27 14:06:24 +02:00
atomic64_test.c	atomic: Add simple atomic_t tests	2015-07-27 14:06:24 +02:00
audit.c
bcd.c
bch.c
bitmap.c	lib/bitmap.c: bitmap_parselist can accept string with whitespaces on head or tail	2015-09-10 13:29:01 -07:00
bitrev.c
bsearch.c
btree.c	treewide: Remove old email address	2015-11-23 09:44:58 +01:00
bug.c
build_OID_registry
bust_spinlocks.c
check_signature.c
checksum.c
clz_ctz.c
clz_tab.c
cmdline.c	lib/cmdline.c: fix get_options() overflow while parsing ranges	2017-06-29 12:48:51 +02:00
compat_audit.c
cordic.c
cpu-notifier-error-inject.c
cpu_rmap.c
cpumask.c	revert "cpumask: don't perform while loop in cpumask_next_and()"	2015-06-18 17:00:23 -10:00
crc-ccitt.c
crc-itu-t.c
crc-t10dif.c	lib: introduce crc_t10dif_update()	2015-05-30 22:42:24 -07:00
crc7.c
crc8.c
crc16.c
crc32.c
crc32defs.h
ctype.c
debug_info.c	kbuild: include core debug info when DEBUG_INFO_REDUCED	2015-06-11 15:08:32 +02:00
debug_locks.c
debugobjects.c
dec_and_lock.c
decompress.c	lib/decompress: set the compressor name to NULL on error	2015-07-17 16:39:54 -07:00
decompress_bunzip2.c	lib/decompressors: use real out buf size for gunzip with kernel	2015-09-10 13:29:01 -07:00
decompress_inflate.c	lib/decompressors: use real out buf size for gunzip with kernel	2015-09-10 13:29:01 -07:00
decompress_unlz4.c	lib/decompressors: use real out buf size for gunzip with kernel	2015-09-10 13:29:01 -07:00
decompress_unlzma.c	lib/decompress_unlzma: Do a NULL check for pointer	2015-09-10 13:29:01 -07:00
decompress_unlzo.c	lib/decompressors: use real out buf size for gunzip with kernel	2015-09-10 13:29:01 -07:00
decompress_unxz.c	lib/decompressors: use real out buf size for gunzip with kernel	2015-09-10 13:29:01 -07:00
devres.c	devres: fix a for loop bounds check	2015-10-05 04:49:54 +01:00
digsig.c	lib/digsig: fix dereference of NULL user_key_payload	2017-10-27 10:23:17 +02:00
div64.c	remove abs64()	2015-11-09 15:11:24 -08:00
dma-debug.c	dma-debug: avoid spinlock recursion when disabling dma-debug	2016-06-07 18:14:37 -07:00
dump_stack.c	dump_stack: avoid potential deadlocks	2016-02-25 12:01:23 -08:00
dynamic_debug.c	dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0	2017-12-16 10:33:54 +01:00
dynamic_queue_limits.c
earlycpio.c
extable.c
fault-inject.c	fault-inject: fix inverted interval/probability values in printk	2015-10-23 17:55:10 +09:00
fdt.c
fdt_empty_tree.c
fdt_ro.c
fdt_rw.c
fdt_strerror.c
fdt_sw.c
fdt_wip.c
find_bit.c
flex_array.c
flex_proportions.c
gcd.c
gen_crc32table.c
genalloc.c	lib/genalloc.c: make the avail variable an atomic_long_t	2017-12-16 10:33:54 +01:00
glob.c
halfmd4.c	lib/halfmd4.c: use rol32 inline function in the ROUND macro	2015-11-06 17:50:42 -08:00
hexdump.c	lib/hexdump.c: truncate output in case of overflow	2015-11-06 17:50:42 -08:00
hweight.c
idr.c	mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd	2015-11-06 17:50:42 -08:00
inflate.c
int_sqrt.c
interval_tree.c
interval_tree_test.c
iomap.c
iomap_copy.c
iommu-common.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc	2015-11-05 16:34:48 -08:00
iommu-helper.c
ioremap.c
iov_iter.c	fix iov_iter_fault_in_readable()	2016-09-24 10:07:43 +02:00
irq_regs.c
is_single_threaded.c	lib/is_single_threaded.c: change current_is_single_threaded() to use for_each_thread()	2015-11-06 17:50:42 -08:00
jedec_ddr_data.c
kasprintf.c	lib/kasprintf.c: introduce kvasprintf_const	2015-11-06 17:50:42 -08:00
Kconfig	lib: sw842: select crc32	2016-03-03 15:07:24 -08:00
Kconfig.debug	lib/Kconfig.debug: fix frv build failure	2017-08-11 09:08:59 -07:00
Kconfig.kasan	mm, slub, kasan: enable user tracking by default with KASAN=y	2015-11-05 19:34:48 -08:00
Kconfig.kgdb
Kconfig.kmemcheck
kfifo.c
klist.c	klist: fix starting point removed bug in klist iterators	2016-02-25 12:01:16 -08:00
kobject.c	lib/kobject.c: use kvasprintf_const for formatting ->name	2015-11-06 17:50:42 -08:00
kobject_uevent.c
kstrtox.c	lib: add "on"/"off" support to kstrtobool	2016-10-28 03:01:31 -04:00
kstrtox.h
lcm.c
libcrc32c.c	crypto: crc32c - Fix crc32c soft dependency	2016-02-17 12:31:04 -08:00
list_debug.c
list_sort.c	lib/list_sort: use late_initcall to hook in self tests	2015-06-16 14:12:35 -04:00
llist.c	lib/llist.c: fix data race in llist_del_first	2015-11-06 17:50:42 -08:00
locking-selftest-hardirq.h
locking-selftest-mutex.h
locking-selftest-rlock-hardirq.h
locking-selftest-rlock-softirq.h
locking-selftest-rlock.h
locking-selftest-rsem.h
locking-selftest-softirq.h
locking-selftest-spin-hardirq.h
locking-selftest-spin-softirq.h
locking-selftest-spin.h
locking-selftest-wlock-hardirq.h
locking-selftest-wlock-softirq.h
locking-selftest-wlock.h
locking-selftest-wsem.h
locking-selftest.c
lockref.c	locking/lockref: Remove homebrew cmpxchg64_relaxed() macro definition	2015-08-12 11:59:04 +02:00
lru_cache.c
Makefile	test_printf: test printf family at runtime	2015-11-06 17:50:42 -08:00
md5.c
memory-notifier-error-inject.c
memweight.c
net_utils.c
nlattr.c
nmi_backtrace.c	ARM: 8439/1: Fix backtrace generation when IPI is masked	2015-10-03 16:40:51 +01:00
notifier-error-inject.c
notifier-error-inject.h
of-reconfig-notifier-error-inject.c
oid_registry.c
once.c	once: make helper generic for calling functions once	2015-10-08 05:26:36 -07:00
parser.c
pci_iomap.c	libnvdimm for 4.3:	2015-09-08 14:35:59 -07:00
percpu-refcount.c
percpu_counter.c
percpu_ida.c	mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM	2015-11-06 17:50:42 -08:00
percpu_test.c
plist.c
pm-notifier-error-inject.c
proportions.c	treewide: Remove old email address	2015-11-23 09:44:58 +01:00
radix-tree.c	radix-tree: fix race in gang lookup	2016-02-25 12:01:23 -08:00
random32.c	random32: add prandom_init_once helper for own rngs	2015-10-08 05:26:38 -07:00
ratelimit.c
rational.c
rbtree.c
rbtree_test.c
reciprocal_div.c
rhashtable.c	rhashtable: Kill harmless RCU warning in rhashtable_walk_init	2015-12-18 23:44:18 -05:00
scatterlist.c	scatterlist: allow limited chaining without ARCH_HAS_SG_CHAIN	2015-08-17 08:12:51 -06:00
seq_buf.c
sg_split.c	lib: scatterlist: add sg splitting function	2015-08-24 14:28:01 -06:00
sha1.c
show_mem.c	lib/show_mem.c: correct reserved memory calculation	2015-09-08 15:35:28 -07:00
smp_processor_id.c
sort.c	lib/sort: Add 64 bit swap function	2015-06-25 17:00:40 -07:00
stmp_device.c
string.c	lib: move strtobool() to kstrtobool()	2016-10-28 03:01:30 -04:00
string_helpers.c	string_helpers: fix precision loss for some inputs	2016-02-25 12:01:21 -08:00
strncpy_from_user.c	lib: move strncpy_from_unsafe() into mm/maccess.c	2015-08-31 12:36:10 -07:00
strnlen_user.c	Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2015-06-22 15:52:04 -07:00
swiotlb.c	swiotlb: ensure that page-sized mappings are page-aligned	2017-07-05 14:37:20 +02:00
syscall.c
test-hexdump.c	hexdump: Make test data really const	2015-06-25 17:00:40 -07:00
test-kstrtox.c	kstrto*: accept "-0" for signed conversion	2015-09-10 13:29:01 -07:00
test-string_helpers.c	lib/test-string_helpers.c: fix and improve string_get_size() tests	2016-05-11 11:21:26 +02:00
test_bpf.c	bpf: introduce BPF_JIT_ALWAYS_ON config	2018-02-03 17:04:24 +01:00
test_firmware.c	test: firmware_class: report errors properly on failure	2017-11-15 17:13:13 +01:00
test_kasan.c	lib: test_kasan: add some testcases	2015-11-05 19:34:48 -08:00
test_module.c
test_printf.c	test_printf: test printf family at runtime	2015-11-06 17:50:42 -08:00
test_rhashtable.c	rhashtable-test: extend to test concurrency	2015-08-17 14:33:47 -07:00
test_static_key_base.c	locking/static_keys: Provide a selftest	2015-08-03 11:51:12 +02:00
test_static_keys.c	locking/static_keys: Make verify_keys() static	2015-08-05 09:53:40 +02:00
test_user_copy.c	usercopy: Adjust tests to deal with SMAP/PAN	2017-06-14 13:16:27 +02:00
textsearch.c
timerqueue.c
ts_bm.c
ts_fsm.c
ts_kmp.c
ucs2_string.c	lib/ucs2_string: Correct ucs2 -> utf8 conversion	2016-03-03 15:07:09 -08:00
usercopy.c
uuid.c
vsprintf.c	lib/vsprintf.c: update documentation	2015-11-06 17:50:42 -08:00