Skip to contentSkip to conversation

init, allow blacklisting of module_init functions

PATCH Superseded Prarit Bhargava 2 participants 3 messages Jun 15, 2016 – Jun 16, 2016

v1 of 2 Superseded Latest is v2 →

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 init, allow blacklisting of module_init functions

At some point I was 100% sure this worked. I do remember testing it against just a loadable module and had positive testing results. I went back to the time that it was commited (3.15-ish) and blacklisting a module init function didn't work there either, so something went wrong somewhere. In any case this is a trivial patch to add the functionality...

P.

---8<---

sprint_symbol_no_offset() returns the string "function_name [module_name]" where [module_name] is not printed for built in kernel functions. This means that the blacklisting code will fail when comparing module function names with the extended string. This patch adds the functionality to block a module's module_init() function by finding the space in the string and truncating the comparison to that length.

Cc Andrew Morton <[email protected]>
Cc Thomas Gleixner <[email protected]>
Cc Yang Shi <[email protected]>
Cc Prarit Bhargava <[email protected]>
Cc Ingo Molnar <[email protected]>
Cc Mel Gorman <[email protected]>
Cc Rasmus Villemoes <[email protected]>
Cc Kees Cook <[email protected]>
Cc Yaowei Bai <[email protected]>
Cc Andrey Ryabinin <[email protected]>
---
 init/main.c |   13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)
init/main.c +12 -1
index 4c17fda5c2ff..730d6a846216 100644
@@ -708,14 +708,25 @@ static bool __init_or_module initcall_blacklisted(initcall_t fn)
 {
 	struct blacklist_entry *entry;
 	char fn_name[KSYM_SYMBOL_LEN];
+	char *space;
+	int length;
 
 	if (list_empty(&blacklisted_initcalls))
 		return false;
 
 	sprint_symbol_no_offset(fn_name, (unsigned long)fn);
+	/*
+	 * fn will be "function_name [module_name]" where [module_name] is not
+	 * displayed for built-in init functions.  Strip off the [module_name].
+	 */
+	space = strchrnul(fn_name, ' ');
+	if (!space)
+		length = strlen(fn_name);
+	else
+		length = space - fn_name;
 
 	list_for_each_entry(entry, &blacklisted_initcalls, next) {
-		if (!strcmp(fn_name, entry->buf)) {
+		if (!strncmp(fn_name, entry->buf, length)) {
 			pr_debug("initcall %s blacklisted\n", fn_name);
 			return true;
 		}
Signature · 1 line
1.7.9.3
#1 lore raw
Quoted 2 lines · Prarit Bhargava

At some point I was 100% sure this worked. I do remember testing it against just a loadable module and had positive testing results.

I think the current %ps/%pf behaviour was introduced in 4796dd200db9 (way back in 2012).

Quoted 1 line

In any case this is a trivial patch to add the functionality...

Which I still think is broken and needlessly complicated. Please read my first reply again.

Rasmus

#2 lore raw
Quoted 7 lines · Rasmus Villemoes
Quoted 2 lines · Prarit Bhargava

At some point I was 100% sure this worked. I do remember testing it against just a loadable module and had positive testing results.

I think the current %ps/%pf behaviour was introduced in 4796dd200db9 (way back in 2012).

Yeah, I'm scratching my head on that. I *know* I tested it and it worked.

Quoted 6 lines
Quoted 2 lines

In any case this is a trivial patch to add the functionality...

Which I still think is broken and needlessly complicated. Please read my first reply again.

Oops -- I completely missed the 2nd half of your reply. Sorry 'bout that.

I'll do a v3 in a bit

P.

Quoted 2 lines

Rasmus