Hi Linus, Please pull these hardening updates for v6.8-rc1. There will be a second pull request coming at the end of the rc1 window, as we can now finally remove the "strlcpy" API entirely from the kernel. However, that depends on other trees landing first. As always, my tree has been in -next the whole time, and anything touching other subsystems was either explicitly Acked by those maintainers or they were sufficiently trivial and went ignored so I picked them up. Thanks! -Kees The following changes since commit 98b1cc82c4affc16f5598d4fa14b1858671b2263: Linux 6.7-rc2 (2023-11-19 15:02:14 -0800) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.8-rc1 for you to fetch changes up to a75b3809dce2ad006ebf7fa641f49881fa0d79d7: qnx4: Use get_directory_fname() in qnx4_match() (2023-12-13 11:19:18 -0800) ---------------------------------------------------------------- hardening updates for v6.8-rc1 - Introduce the param_unknown_fn type and other clean ups (Andy Shevchenko) - Various __counted_by annotations (Christophe JAILLET, Gustavo A. R. Silva, Kees Cook) - Add KFENCE test to LKDTM (Stephen Boyd) - Various strncpy() refactorings (Justin Stitt) - Fix qnx4 to avoid writing into the smaller of two overlapping buffers - Various strlcpy() refactorings ---------------------------------------------------------------- Andy Shevchenko (5): params: Introduce the param_unknown_fn type params: Do not go over the limit when getting the string length params: Use size_add() for kmalloc() params: Sort headers params: Fix multi-line comment style Christophe JAILLET (1): VMCI: Annotate struct vmci_handle_arr with __counted_by Gustavo A. R. Silva (2): afs: Add __counted_by for struct afs_acl and use struct_size() atags_proc: Add __counted_by for struct buffer and use struct_size() Justin Stitt (5): HID: uhid: replace deprecated strncpy with strscpy drm/modes: replace deprecated strncpy with strscpy_pad nvme-fabrics: replace deprecated strncpy with strscpy nvdimm/btt: replace deprecated strncpy with strscpy nvme-fc: replace deprecated strncpy with strscpy Kees Cook (6): SUNRPC: Replace strlcpy() with strscpy() samples: Replace strlcpy() with strscpy() i40e: Annotate struct i40e_qvlist_info with __counted_by tracing/uprobe: Replace strlcpy() with strscpy() qnx4: Extract dir entry filename processing into helper qnx4: Use get_directory_fname() in qnx4_match() Stephen Boyd (1): lkdtm: Add kfence read after free crash type arch/arm/kernel/atags_proc.c | 4 +- drivers/gpu/drm/drm_modes.c | 6 +-- drivers/hid/uhid.c | 15 ++++---- drivers/misc/lkdtm/heap.c | 60 ++++++++++++++++++++++++++++++ drivers/misc/vmw_vmci/vmci_handle_array.h | 2 +- drivers/nvdimm/btt.c | 2 +- drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/fc.c | 8 ++-- fs/afs/internal.h | 2 +- fs/afs/xattr.c | 2 +- fs/qnx4/dir.c | 52 ++++---------------------- fs/qnx4/namei.c | 29 ++++++--------- fs/qnx4/qnx4.h | 60 ++++++++++++++++++++++++++++++ include/linux/kfence.h | 2 + include/linux/moduleparam.h | 6 +-- include/linux/net/intel/i40e_client.h | 2 +- kernel/params.c | 52 ++++++++++++++------------ kernel/trace/trace_uprobe.c | 2 +- net/sunrpc/clnt.c | 10 ++++- samples/trace_events/trace-events-sample.h | 2 +- samples/v4l/v4l2-pci-skeleton.c | 10 ++--- 21 files changed, 208 insertions(+), 124 deletions(-) -- Kees Cook
