stackleak: Support Clang stack depth tracking

Kees Cook kexec kvm linux-acpi linux-efi linux-hardening linux-kbuild linux-mm linux-security-module linux-trace-kernel lkml llvm oe-kbuild-all platform-driver-x86 4 versions May 7, 2025 – Jul 24, 2025 In review

Get series with b4

b4 am [email protected]

Versions newest first · linked by author and title

v4 Latest Jul 24, 20254 patches 7 repliesIn review
v3 Jul 17, 202513 patches 15 repliesSuperseded 7 of 13 applied
v2 May 23, 202514 patches 14 repliesSuperseded

Earlier versions · 1

Version	Posted	Patches	Replies	Status
v1	May 7, 2025	8 patches	6 replies	Superseded

Changes in v4 from the cover letter

- rebase on for-next/hardening tree (took subset of v3 patches)
- improve commit logs for x86 and arm64 changes (Mike, Will, Ard)
v3: https://lore.kernel.org/lkml/[email protected]/
v2: https://lore.kernel.org/lkml/[email protected]/
v1: https://lore.kernel.org/lkml/[email protected]/

Patches in v4 No applies recorded yet

#	Subject and files	Size	Replies
1/4	arm64: Handle KCOV __init vs inline mismatches`arch/arm64/include/asm/acpi.h`	+1 -1	1 reply
2/4	x86: Handle KCOV __init vs inline mismatches`arch/x86/include/asm/acpi.h` `arch/x86/include/asm/realmode.h` `arch/x86/kernel/kvm.c` +7 more	+13 ~~-13~~	2 replies
3/4	init.h: Disable sanitizer coverage for __init and __head`arch/x86/include/asm/init.h` `include/linux/init.h`	+4 -2	0 replies
4/4	kstack_erase: Support Clang stack depth tracking`scripts/Makefile.kstack_erase` `security/Kconfig.hardening`	+10 -1	1 reply

Reviews trailers per patch

All 4 patches have a Reviewed-by or Acked-by.

Patch	Marco Elver	Nicolas Schier	Will Deacon	Mike Rapoport (Microsoft)	Arnd Bergmann
1/4			A-b
2/4				A-b	A-b
3/4	A-b
4/4		A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 5 reviewers.

Read the v4 thread

Cover letter [PATCH v4 0/4] stackleak: Support Clang stack depth tracking

v4:
- rebase on for-next/hardening tree (took subset of v3 patches)
- improve commit logs for x86 and arm64 changes (Mike, Will, Ard)
v3: https://lore.kernel.org/lkml/[email protected]/
v2: https://lore.kernel.org/lkml/[email protected]/
v1: https://lore.kernel.org/lkml/[email protected]/

Hi,

These are the remaining changes needed to support Clang stack depth tracking for kstack_erase (nee stackleak).

Thanks!

-Kees

Kees Cook (4):
arm64: Handle KCOV __init vs inline mismatches
x86: Handle KCOV __init vs inline mismatches init.h: Disable sanitizer coverage for __init and __head
kstack_erase: Support Clang stack depth tracking

 security/Kconfig.hardening      | 5 ++++-
 scripts/Makefile.kstack_erase   | 6 ++++++
 arch/arm64/include/asm/acpi.h   | 2 +-
 arch/x86/include/asm/acpi.h     | 4 ++--
 arch/x86/include/asm/init.h     | 2 +-
 arch/x86/include/asm/realmode.h | 2 +-
 include/linux/acpi.h            | 4 ++--
 include/linux/bootconfig.h      | 2 +-
 include/linux/efi.h             | 2 +-
 include/linux/init.h            | 4 +++-
 include/linux/memblock.h        | 2 +-
 include/linux/smp.h             | 2 +-
 arch/x86/kernel/kvm.c           | 2 +-
 arch/x86/mm/init_64.c           | 2 +-
 kernel/kexec_handover.c         | 4 ++--
 15 files changed, 28 insertions(+), 17 deletions(-)

Signature · 1 line

2.34.1

Read the cover letter in its thread