{"push_id":1393415763,"size":2,"distinct_size":2,"ref":"refs/heads/mm-6.0","head":"704dce27e427b30832eb9b4f03c340bca094d4c1","before":"3c8c2c55150c9ba24c784471f016d6d2fd1c4ad1","commits":[{"sha":"7ddb9b4eca5313619bcbfb7165072ae83f1bdf69","author":{"name":"Moyster","email":"dc0c819b008ce687a7f89349149f82de3cbbae07@gmail.com"},"message":"Backport: \"stackprotector: Unify the HAVE_CC_STACKPROTECTOR logic between arch\" for Mediateks 3.10.x kernels\"\nInstead of duplicating the CC_STACKPROTECTOR Kconfig and\nMakefile logic in each architecture, switch to using\nHAVE_CC_STACKPROTECTOR and keep everything in one place. This\nretains the x86-specific bug verification scripts.\n\nSigned-off-by: Kees Cook <keescook@chromium.org>\nCc: Arjan van de Ven <arjan@linux.intel.com>\nCc: Michal Marek <mmarek@suse.cz>\nCc: Russell King <linux@arm.linux.org.uk>\nCc: Ralf Baechle <ralf@linux-mips.org>\nCc: Paul Mundt <lethal@linux-sh.org>\nCc: James Hogan <james.hogan@imgtec.com>\nCc: Stephen Rothwell <sfr@canb.auug.org.au>\nCc: Shawn Guo <shawn.guo@linaro.org>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Andrew Morton <akpm@linux-foundation.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: Thomas Gleixner <tglx@linutronix.de>\nCc: linux-arm-kernel@lists.infradead.org\nCc: linux-mips@linux-mips.org\nCc: linux-arch@vger.kernel.org\nLink: http://lkml.kernel.org/r/1387481759-14535-2-git-send-email-keescook@chromium.org\nSigned-off-by: Ingo Molnar <mingo@kernel.org>\n[davidb@codeaurora.org: Simple Kconfig merge resolution]\nGit-commit: 19952a9\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nChange-Id: I6e430de3c79306724e90ea1178f242145c39f059\nSigned-off-by: David Brown <davidb@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/Moyster/android_kernel_m2note/commits/7ddb9b4eca5313619bcbfb7165072ae83f1bdf69"},{"sha":"704dce27e427b30832eb9b4f03c340bca094d4c1","author":{"name":"Kees Cook","email":"999bfbbf6e15a9d6aba3dfebadcec55340f87c3f@chromium.org"},"message":"stackprotector: Introduce CONFIG_CC_STACKPROTECTOR_STRONG\n\nThis changes the stack protector config option into a choice of\n\"None\", \"Regular\", and \"Strong\":\n\n   CONFIG_CC_STACKPROTECTOR_NONE\n   CONFIG_CC_STACKPROTECTOR_REGULAR\n   CONFIG_CC_STACKPROTECTOR_STRONG\n\n\"Regular\" means the old CONFIG_CC_STACKPROTECTOR=y option.\n\n\"Strong\" is a new mode introduced by this patch. With \"Strong\" the\nkernel is built with -fstack-protector-strong (available in\ngcc 4.9 and later). This option increases the coverage of the stack\nprotector without the heavy performance hit of -fstack-protector-all.\n\nFor reference, the stack protector options available in gcc are:\n\n-fstack-protector-all:\n  Adds the stack-canary saving prefix and stack-canary checking\n  suffix to _all_ function entry and exit. Results in substantial\n  use of stack space for saving the canary for deep stack users\n  (e.g. historically xfs), and measurable (though shockingly still\n  low) performance hit due to all the saving/checking. Really not\n  suitable for sane systems, and was entirely removed as an option\n  from the kernel many years ago.\n\n-fstack-protector:\n  Adds the canary save/check to functions that define an 8\n  (--param=ssp-buffer-size=N, N=8 by default) or more byte local\n  char array. Traditionally, stack overflows happened with\n  string-based manipulations, so this was a way to find those\n  functions. Very few total functions actually get the canary; no\n  measurable performance or size overhead.\n\n-fstack-protector-strong\n  Adds the canary for a wider set of functions, since it's not\n  just those with strings that have ultimately been vulnerable to\n  stack-busting. With this superset, more functions end up with a\n  canary, but it still remains small compared to all functions\n  with only a small change in performance. Based on the original\n  design document, a function gets the canary when it contains any\n  of:\n\n    - local variable's address used as part of the right hand side\n      of an assignment or function argument\n    - local variable is an array (or union containing an array),\n      regardless of array type or length\n    - uses register local variables\n\n  https://docs.google.com/a/google.com/document/d/1xXBH6rRZue4f296vGt9YQcuLVQHeE516stHwt8M9xyU\n\nFind below a comparison of \"size\" and \"objdump\" output when built with\ngcc-4.9 in three configurations:\n\n  - defconfig\n\t11430641 kernel text size\n\t36110 function bodies\n\n  - defconfig + CONFIG_CC_STACKPROTECTOR_REGULAR\n\t11468490 kernel text size (+0.33%)\n\t1015 of 36110 functions are stack-protected (2.81%)\n\n  - defconfig + CONFIG_CC_STACKPROTECTOR_STRONG via this patch\n\t11692790 kernel text size (+2.24%)\n\t7401 of 36110 functions are stack-protected (20.5%)\n\nWith -strong, ARM's compressed boot code now triggers stack\nprotection, so a static guard was added. Since this is only used\nduring decompression and was never used before, the exposure\nhere is very small. Once it switches to the full kernel, the\nstack guard is back to normal.\n\nChrome OS has been using -fstack-protector-strong for its kernel\nbuilds for the last 8 months with no problems.\n\nSigned-off-by: Kees Cook <keescook@chromium.org>\nCc: Arjan van de Ven <arjan@linux.intel.com>\nCc: Michal Marek <mmarek@suse.cz>\nCc: Russell King <linux@arm.linux.org.uk>\nCc: Ralf Baechle <ralf@linux-mips.org>\nCc: Paul Mundt <lethal@linux-sh.org>\nCc: James Hogan <james.hogan@imgtec.com>\nCc: Stephen Rothwell <sfr@canb.auug.org.au>\nCc: Shawn Guo <shawn.guo@linaro.org>\nCc: Linus Torvalds <torvalds@linux-foundation.org>\nCc: Andrew Morton <akpm@linux-foundation.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nCc: linux-arm-kernel@lists.infradead.org\nCc: linux-mips@linux-mips.org\nCc: linux-arch@vger.kernel.org\nLink: http://lkml.kernel.org/r/1387481759-14535-3-git-send-email-keescook@chromium.org\n[ Improved the changelog and descriptions some more. ]\nSigned-off-by: Ingo Molnar <mingo@kernel.org>\nGit-commit: 8779657d29c0ebcc0c94ede4df2f497baf1b563f\nGit-repo: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nChange-Id: I0c53785c54b9c2bedd6134fb959b59d1d1afb0ef\nSigned-off-by: David Brown <davidb@codeaurora.org>","distinct":true,"url":"https://api.github.com/repos/Moyster/android_kernel_m2note/commits/704dce27e427b30832eb9b4f03c340bca094d4c1"}]}
{"actor":{"display_login":"Moyster"}}