• B
    x86/KASLR: Add 'struct slot_area' to manage random_addr slots · c401cf15
    Baoquan He 提交于
    In order to support KASLR moving the kernel anywhere in physical memory
    (which could be up to 64TB), we need to handle counting the potential
    randomization locations in a more efficient manner.
    
    In the worst case with 64TB, there could be roughly 32 * 1024 * 1024
    randomization slots if CONFIG_PHYSICAL_ALIGN is 0x1000000. Currently
    the starting address of candidate positions is stored into the slots[]
    array, one at a time. This method would cost too much memory and it's
    also very inefficient to get and save the slot information into the slot
    array one by one.
    
    This patch introduces 'struct slot_area' to manage each contiguous region
    of randomization slots. Each slot_area will contain the starting address
    and how many available slots are in this area. As with the original code,
    the slot_areas[] will avoid the mem_avoid[] regions.
    
    Since setup_data is a linked list, it could contain an unknown number
    of memory regions to be avoided, which could cause us to fragment
    the contiguous memory that the slot_area array is tracking. In normal
    operation this level of fragmentation will be extremely rare, but we
    choose a suitably large value (100) for the array. If setup_data forces
    the slot_area array to become highly fragmented and there are more
    slots available beyond the first 100 found, the rest will be ignored
    for KASLR selection.
    
    The function store_slot_info() is used to calculate the number of slots
    available in the passed-in memory region and stores it into slot_areas[]
    after adjusting for alignment and size requirements.
    Signed-off-by: NBaoquan He <bhe@redhat.com>
    [ Rewrote changelog, squashed with new functions. ]
    Signed-off-by: NKees Cook <keescook@chromium.org>
    Cc: Andrew Morton <akpm@linux-foundation.org>
    Cc: Andy Lutomirski <luto@amacapital.net>
    Cc: Andy Lutomirski <luto@kernel.org>
    Cc: Borislav Petkov <bp@alien8.de>
    Cc: Borislav Petkov <bp@suse.de>
    Cc: Brian Gerst <brgerst@gmail.com>
    Cc: Dave Young <dyoung@redhat.com>
    Cc: Denys Vlasenko <dvlasenk@redhat.com>
    Cc: H. Peter Anvin <hpa@zytor.com>
    Cc: Linus Torvalds <torvalds@linux-foundation.org>
    Cc: Peter Zijlstra <peterz@infradead.org>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Cc: Vivek Goyal <vgoyal@redhat.com>
    Cc: Yinghai Lu <yinghai@kernel.org>
    Cc: kernel-hardening@lists.openwall.com
    Cc: lasse.collin@tukaani.org
    Link: http://lkml.kernel.org/r/1462825332-10505-4-git-send-email-keescook@chromium.orgSigned-off-by: NIngo Molnar <mingo@kernel.org>
    c401cf15
kaslr.c 13.5 KB