On Mon, Oct 10, 2016 at 6:26 AM, Ralf Baechle <ralf@xxxxxxxxxxxxxx> wrote:
> On Sat, Oct 08, 2016 at 10:47:14PM +0100, Paul Burton wrote:
>
>> Enable CONFIG_HARDENED_USERCOPY checks for MIPS, calling check_object
>> size in all of copy_{to,from}_user(), __copy_{to,from}_user() &
>> __copy_{to,from}_user_inatomic().
Awesome! Thanks for hooking this up. (Were you able to test with
lkdtm's usercopy tests?)
> Patch looks good but I was wondering how about further usermode
> accessors such as csum_partial_copy_from_user, csum_and_copy_from_user,
> csum_and_copy_to_user, csum_partial_copy_nocheck?
Oh, hrm, this seems to be missing for all architectures. I would bet
KASan would be interested in instrumenting these too.
It seems these functions only used by networking code?
-Kees
--
Kees Cook
Nexus Security
