RFC slab: Allocate and use per-call-site caches
Get series with b4
b4 am [email protected]Versions newest first
- v1 RFC Latest5 patches 11 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/5 | slab: Introduce kmem_buckets_destroy()include/ mm/ | +15 | 0 replies | |
| 2/5 | codetag: Run module_load hooks for builtin codetagslib/ | +1 | 2 replies | |
| 3/5 | codetag: Introduce codetag_early_walk()include/ lib/ | +18 | 2 replies | |
| 4/5 | alloc_tag: Track fixed vs dynamic sized kmalloc callsinclude/ include/ lib/ +1 more | +50 | 2 replies | |
| 5/5 | slab: Allocate and use per-call-site cachesinclude/ lib/ mm/ +2 more | +170 | 5 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [RFC][PATCH 0/5] slab: Allocate and use per-call-site caches
Hi,
Here's my current progress on using per-call-site kmalloc caches (instead of KMALLOC_NORMAL), as a defense against the common heap-grooming attacks that construct malicious objects in the same cache as a target object.
I'd like to get feedback on the general approach before I continue with it. I've noted in the later patches what additional improvements I'd like to make. The first 3 patches are relatively small infrastructure changes.
Thanks!
-Kees
Kees Cook (5):
slab: Introduce kmem_buckets_destroy()
codetag: Run module_load hooks for builtin codetags
codetag: Introduce codetag_early_walk()
alloc_tag: Track fixed vs dynamic sized kmalloc calls
slab: Allocate and use per-call-site caches
include/linux/alloc_tag.h | 38 +++++++++-- include/linux/codetag.h | 2 + include/linux/slab.h | 17 ++--- lib/alloc_tag.c | 129 +++++++++++++++++++++++++++++++++++--- lib/codetag.c | 21 +++++-- mm/Kconfig | 25 ++++++++ mm/slab_common.c | 18 +++++- mm/slub.c | 31 ++++++++- 8 files changed, 253 insertions(+), 28 deletions(-)
Signature · 1 line
2.34.1