[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 21 Jan 2019 10:36:18 -0800
From: Andi Kleen <ak@...ux.intel.com>
To: Julian Stecklina <jsteckli@...zon.de>
Cc: linux-kernel@...r.kernel.org, David Woodhouse <dwmw2@...radead.org>,
Liran Alon <liran.alon@...cle.com>,
Paolo Bonzini <pbonzini@...hat.com>,
Thomas Gleixner <tglx@...utronix.de>,
Linus Torvalds <torvalds@...ux-foundation.org>, x86@...nel.org,
Kernel Hardening <kernel-hardening@...ts.openwall.com>
Subject: Re: [RFC] x86/speculation: add L1 Terminal Fault / Foreshadow demo
> + /* Check the start address: needs to be page-aligned.. */
> +- if (start & ~PAGE_MASK)
> ++ if (start & ~PAGE_MASK) {
> ++
> ++ /*
> ++ * XXX Hack
> ++ *
> ++ * We re-use this error case to show case a cache load gadget:
> ++ * There is a mispredicted branch, which leads to prefetching
> ++ * the cache with attacker controlled data.
> ++ */
> ++ asm volatile (
Obviously that can never be added to a standard kernel.
And I don't see much point in shipping test cases that require non
standard kernel patching. The idea of shipping test cases is that
you can easily test them, but in this form it can't.
Also even without that problem, not sure what benefit including such a thing
would have.
If you want to improve regression test coverage, it would be far better to have
test cases which do more directed unit testing against specific software
parts of the mitigation.
For example some automated testing that the host page tables are inverted as
expected for different scenarios. I checked that manually during development,
but something automated would be great as a regression test. It would
need some way to translate VA->PA in user space.
Or have some tests that run test cases with PT or the MSR tracer with
a guest and automatically check that the MSR writes for VM entries are in
the right location.
-Andi
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
