Hello, On 15.08.2018 23:56, Kees Cook wrote: > On Wed, Aug 15, 2018 at 1:18 PM, Linus Torvalds > <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote: >> I absolutely refuse to take any hardening patches at all that have >> BUG() or panic() or similar machine-killing in it. > > Okay, mental model adjusted. :) It was only "strong discouraged" until now. > >> I thought VLA's were mostly gone. ... > And after that, there's a single patch to move -Wvla up into the > top-level Makefile: > > https://patchwork.kernel.org/patch/10489873/ > > So, we're basically done I've just sent the 15th version of the series with changes according to the feedback from Linus: 1. BUG_ON() in stackleak_erase() is safely eliminated; 2. Stack Clash detection (alloca() check) is completely dropped, since global '-Wvla' should arrive soon. stackleak_check_alloca() for arm64 is dropped as well in a separate commit. This version is rebased onto Linus' tree. Best regards, Alexander
