On Tue, 16 Apr 2019, Alexander Potapenko wrote: > > Hmmm... But we already have debugging options that poison objects and > > pages? > Laura Abbott mentioned in one of the previous threads > (https://marc.info/?l=kernel-hardening&m=155474181528491&w=2) that: > > """ > I've looked at doing something similar in the past (failing to find > the thread this morning...) and while this will work, it has pretty > serious performance issues. It's not actually the poisoning which > is expensive but that turning on debugging removes the cpu slab > which has significant performance penalties. Ok you could rework that logic to be able to keep the per cpu slabs? Also if you do the zeroing then you need to do it in the hotpath. And this patch introduces new instructions to that hotpath for checking and executing the zeroing.
