Commit 9b94fe91 authored by Andrey Konovalov's avatar Andrey Konovalov Committed by Andrew Morton

kasan: move kasan_mempool_poison_object

Move kasan_mempool_poison_object after all slab-related KASAN hooks.

This is a preparatory change for the following patches in this series.

No functional changes.

Link: https://lkml.kernel.org/r/23ea215409f43c13cdf9ecc454501a264c107d67.1703024586.git.andreyknvl@google.comSigned-off-by: default avatarAndrey Konovalov <andreyknvl@google.com>
Cc: Alexander Lobakin <alobakin@pm.me>
Cc: Alexander Potapenko <glider@google.com>
Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com>
Cc: Breno Leitao <leitao@debian.org>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Evgenii Stepanov <eugenis@google.com>
Cc: Marco Elver <elver@google.com>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
parent 280ec6cc
...@@ -172,13 +172,6 @@ static __always_inline void kasan_kfree_large(void *ptr) ...@@ -172,13 +172,6 @@ static __always_inline void kasan_kfree_large(void *ptr)
__kasan_kfree_large(ptr, _RET_IP_); __kasan_kfree_large(ptr, _RET_IP_);
} }
void __kasan_mempool_poison_object(void *ptr, unsigned long ip);
static __always_inline void kasan_mempool_poison_object(void *ptr)
{
if (kasan_enabled())
__kasan_mempool_poison_object(ptr, _RET_IP_);
}
void * __must_check __kasan_slab_alloc(struct kmem_cache *s, void * __must_check __kasan_slab_alloc(struct kmem_cache *s,
void *object, gfp_t flags, bool init); void *object, gfp_t flags, bool init);
static __always_inline void * __must_check kasan_slab_alloc( static __always_inline void * __must_check kasan_slab_alloc(
...@@ -219,6 +212,13 @@ static __always_inline void * __must_check kasan_krealloc(const void *object, ...@@ -219,6 +212,13 @@ static __always_inline void * __must_check kasan_krealloc(const void *object,
return (void *)object; return (void *)object;
} }
void __kasan_mempool_poison_object(void *ptr, unsigned long ip);
static __always_inline void kasan_mempool_poison_object(void *ptr)
{
if (kasan_enabled())
__kasan_mempool_poison_object(ptr, _RET_IP_);
}
/* /*
* Unlike kasan_check_read/write(), kasan_check_byte() is performed even for * Unlike kasan_check_read/write(), kasan_check_byte() is performed even for
* the hardware tag-based mode that doesn't rely on compiler instrumentation. * the hardware tag-based mode that doesn't rely on compiler instrumentation.
...@@ -256,7 +256,6 @@ static inline bool kasan_slab_free(struct kmem_cache *s, void *object, bool init ...@@ -256,7 +256,6 @@ static inline bool kasan_slab_free(struct kmem_cache *s, void *object, bool init
return false; return false;
} }
static inline void kasan_kfree_large(void *ptr) {} static inline void kasan_kfree_large(void *ptr) {}
static inline void kasan_mempool_poison_object(void *ptr) {}
static inline void *kasan_slab_alloc(struct kmem_cache *s, void *object, static inline void *kasan_slab_alloc(struct kmem_cache *s, void *object,
gfp_t flags, bool init) gfp_t flags, bool init)
{ {
...@@ -276,6 +275,7 @@ static inline void *kasan_krealloc(const void *object, size_t new_size, ...@@ -276,6 +275,7 @@ static inline void *kasan_krealloc(const void *object, size_t new_size,
{ {
return (void *)object; return (void *)object;
} }
static inline void kasan_mempool_poison_object(void *ptr) {}
static inline bool kasan_check_byte(const void *address) static inline bool kasan_check_byte(const void *address)
{ {
return true; return true;
......
...@@ -282,29 +282,6 @@ void __kasan_kfree_large(void *ptr, unsigned long ip) ...@@ -282,29 +282,6 @@ void __kasan_kfree_large(void *ptr, unsigned long ip)
____kasan_kfree_large(ptr, ip); ____kasan_kfree_large(ptr, ip);
} }
void __kasan_mempool_poison_object(void *ptr, unsigned long ip)
{
struct folio *folio;
folio = virt_to_folio(ptr);
/*
* Even though this function is only called for kmem_cache_alloc and
* kmalloc backed mempool allocations, those allocations can still be
* !PageSlab() when the size provided to kmalloc is larger than
* KMALLOC_MAX_SIZE, and kmalloc falls back onto page_alloc.
*/
if (unlikely(!folio_test_slab(folio))) {
if (____kasan_kfree_large(ptr, ip))
return;
kasan_poison(ptr, folio_size(folio), KASAN_PAGE_FREE, false);
} else {
struct slab *slab = folio_slab(folio);
____kasan_slab_free(slab->slab_cache, ptr, ip, false, false);
}
}
void * __must_check __kasan_slab_alloc(struct kmem_cache *cache, void * __must_check __kasan_slab_alloc(struct kmem_cache *cache,
void *object, gfp_t flags, bool init) void *object, gfp_t flags, bool init)
{ {
...@@ -452,6 +429,29 @@ void * __must_check __kasan_krealloc(const void *object, size_t size, gfp_t flag ...@@ -452,6 +429,29 @@ void * __must_check __kasan_krealloc(const void *object, size_t size, gfp_t flag
return ____kasan_kmalloc(slab->slab_cache, object, size, flags); return ____kasan_kmalloc(slab->slab_cache, object, size, flags);
} }
void __kasan_mempool_poison_object(void *ptr, unsigned long ip)
{
struct folio *folio;
folio = virt_to_folio(ptr);
/*
* Even though this function is only called for kmem_cache_alloc and
* kmalloc backed mempool allocations, those allocations can still be
* !PageSlab() when the size provided to kmalloc is larger than
* KMALLOC_MAX_SIZE, and kmalloc falls back onto page_alloc.
*/
if (unlikely(!folio_test_slab(folio))) {
if (____kasan_kfree_large(ptr, ip))
return;
kasan_poison(ptr, folio_size(folio), KASAN_PAGE_FREE, false);
} else {
struct slab *slab = folio_slab(folio);
____kasan_slab_free(slab->slab_cache, ptr, ip, false, false);
}
}
bool __kasan_check_byte(const void *address, unsigned long ip) bool __kasan_check_byte(const void *address, unsigned long ip)
{ {
if (!kasan_byte_accessible(address)) { if (!kasan_byte_accessible(address)) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment