treewide: Replace more open-coded allocation size multiplications

As done treewide earlier, this catches several more open-coded allocation size calculations that were added to the kernel during the merge window. This performs the following mechanical transformations using Coccinelle:

	kvmalloc(a * b, ...) -> kvmalloc_array(a, b, ...)
	kvzalloc(a * b, ...) -> kvcalloc(a, b, ...)
	devm_kzalloc(..., a * b, ...) -> devm_kcalloc(..., a, b, ...)

Signed-off-by Kees Cook <[email protected]>

Quoted 5 lines · Kees Cook

As done treewide earlier, this catches several more open-coded allocation size calculations that were added to the kernel during the merge window. This performs the following mechanical transformations using Coccinelle:

Quoted 5 lines

      kvmalloc(a * b, ...) -> kvmalloc_array(a, b, ...)
      kvzalloc(a * b, ...) -> kvcalloc(a, b, ...)
      devm_kzalloc(..., a * b, ...) -> devm_kcalloc(..., a, b, ...)

Signed-off-by Kees Cook <[email protected]>

Has this had any testing in linux-next?

And when was "earlier"?

Quoted 10 lines · Greg KH

Quoted 9 lines · Kees Cook

As done treewide earlier, this catches several more open-coded allocation size calculations that were added to the kernel during the merge window. This performs the following mechanical transformations using Coccinelle:

      kvmalloc(a * b, ...) -> kvmalloc_array(a, b, ...)
      kvzalloc(a * b, ...) -> kvcalloc(a, b, ...)
      devm_kzalloc(..., a * b, ...) -> devm_kcalloc(..., a, b, ...)

Quoted 3 lines

Quoted 1 line

Signed-off-by Kees Cook <[email protected]>

Has this had any testing in linux-next?

No; they're mechanical transformations (though I did build test them). If you want I could add this to linux-next for a week?

Quoted 1 line

And when was "earlier"?

v4.18, when all of these were originally eliminated:

026f05079b00 treewide: Use array_size() in f2fs_kzalloc() c86065938aab treewide: Use array_size() in f2fs_kmalloc() 76e43e37a407 treewide: Use array_size() in sock_kmalloc() 84ca176bf54a treewide: Use array_size() in kvzalloc_node() fd7becedb1f0 treewide: Use array_size() in vzalloc_node() fad953ce0b22 treewide: Use array_size() in vzalloc() 42bc47b35320 treewide: Use array_size() in vmalloc() a86854d0c599 treewide: devm_kzalloc() -> devm_kcalloc() 3c4211ba8ad8 treewide: devm_kmalloc() -> devm_kmalloc_array() 778e1cdd81bb treewide: kvzalloc() -> kvcalloc() 344476e16acb treewide: kvmalloc() -> kvmalloc_array() 590b5b7d8671 treewide: kzalloc_node() -> kcalloc_node() 6396bb221514 treewide: kzalloc() -> kcalloc() 6da2ec56059c treewide: kmalloc() -> kmalloc_array()

The new patch is catching new open-coded multiplications introduced in v4.19.

Quoted 11 lines · Kees Cook

Quoted 10 lines · Greg KH

Quoted 9 lines · Kees Cook

As done treewide earlier, this catches several more open-coded allocation size calculations that were added to the kernel during the merge window. This performs the following mechanical transformations using Coccinelle:

      kvmalloc(a * b, ...) -> kvmalloc_array(a, b, ...)
      kvzalloc(a * b, ...) -> kvcalloc(a, b, ...)
      devm_kzalloc(..., a * b, ...) -> devm_kcalloc(..., a, b, ...)

Quoted 6 lines

Quoted 3 lines

Quoted 1 line

Signed-off-by Kees Cook <[email protected]>

Has this had any testing in linux-next?

No; they're mechanical transformations (though I did build test them). If you want I could add this to linux-next for a week?

That would be good, thanks.

Quoted 19 lines

Quoted 1 line

And when was "earlier"?

v4.18, when all of these were originally eliminated:

026f05079b00 treewide: Use array_size() in f2fs_kzalloc() c86065938aab treewide: Use array_size() in f2fs_kmalloc() 76e43e37a407 treewide: Use array_size() in sock_kmalloc() 84ca176bf54a treewide: Use array_size() in kvzalloc_node() fd7becedb1f0 treewide: Use array_size() in vzalloc_node() fad953ce0b22 treewide: Use array_size() in vzalloc() 42bc47b35320 treewide: Use array_size() in vmalloc() a86854d0c599 treewide: devm_kzalloc() -> devm_kcalloc() 3c4211ba8ad8 treewide: devm_kmalloc() -> devm_kmalloc_array() 778e1cdd81bb treewide: kvzalloc() -> kvcalloc() 344476e16acb treewide: kvmalloc() -> kvmalloc_array() 590b5b7d8671 treewide: kzalloc_node() -> kcalloc_node() 6396bb221514 treewide: kzalloc() -> kcalloc() 6da2ec56059c treewide: kmalloc() -> kmalloc_array()

Quoted 1 line

The new patch is catching new open-coded multiplications introduced in v4.19.

As this is getting smaller, why not just break it up and do it through all of the different subsystems instead of one large patch?

And do we have a way to add a rule to 0-day to catch these so that they get a warning when they are added again?

Quoted 40 lines · Greg KH

Quoted 11 lines · Kees Cook

Quoted 10 lines · Greg KH

Quoted 9 lines · Kees Cook

As done treewide earlier, this catches several more open-coded allocation size calculations that were added to the kernel during the merge window. This performs the following mechanical transformations using Coccinelle:

      kvmalloc(a * b, ...) -> kvmalloc_array(a, b, ...)
      kvzalloc(a * b, ...) -> kvcalloc(a, b, ...)
      devm_kzalloc(..., a * b, ...) -> devm_kcalloc(..., a, b, ...)

Quoted 6 lines

Quoted 3 lines

Quoted 1 line

Signed-off-by Kees Cook <[email protected]>

Has this had any testing in linux-next?

No; they're mechanical transformations (though I did build test them). If you want I could add this to linux-next for a week?

That would be good, thanks.

Quoted 19 lines

Quoted 1 line

And when was "earlier"?

v4.18, when all of these were originally eliminated:

026f05079b00 treewide: Use array_size() in f2fs_kzalloc() c86065938aab treewide: Use array_size() in f2fs_kmalloc() 76e43e37a407 treewide: Use array_size() in sock_kmalloc() 84ca176bf54a treewide: Use array_size() in kvzalloc_node() fd7becedb1f0 treewide: Use array_size() in vzalloc_node() fad953ce0b22 treewide: Use array_size() in vzalloc() 42bc47b35320 treewide: Use array_size() in vmalloc() a86854d0c599 treewide: devm_kzalloc() -> devm_kcalloc() 3c4211ba8ad8 treewide: devm_kmalloc() -> devm_kmalloc_array() 778e1cdd81bb treewide: kvzalloc() -> kvcalloc() 344476e16acb treewide: kvmalloc() -> kvmalloc_array() 590b5b7d8671 treewide: kzalloc_node() -> kcalloc_node() 6396bb221514 treewide: kzalloc() -> kcalloc() 6da2ec56059c treewide: kmalloc() -> kmalloc_array()

Quoted 7 lines

Quoted 1 line

The new patch is catching new open-coded multiplications introduced in v4.19.

As this is getting smaller, why not just break it up and do it through all of the different subsystems instead of one large patch?

And do we have a way to add a rule to 0-day to catch these so that they get a warning when they are added again?

They could just be added to scripts/coccinelle and 0-day will report them?

For example, 0-day ran scripts/coccinelle/api/platform_no_drv_owner.cocci on a recently submitted patch and reported it here:
https://lore.kernel.org/lkml/201808301856.vMNJerSs%[email protected]/

But I'm not sure if 0-day runs make coccicheck on specific semantic patches, or runs all of them (CC'd Fengguang).

Quoted 12 lines · Joel Fernandes

Quoted 2 lines · Greg KH

And do we have a way to add a rule to 0-day to catch these so that they get a warning when they are added again?

They could just be added to scripts/coccinelle and 0-day will report them?

For example, 0-day ran scripts/coccinelle/api/platform_no_drv_owner.cocci on
a recently submitted patch and reported it here:

Quoted 5 lines

https://lore.kernel.org/lkml/201808301856.vMNJerSs%[email protected]/

But I'm not sure if 0-day runs make coccicheck on specific semantic patches,
or runs all of them (CC'd Fengguang).

0-day runs all coccinelle scripts. However only auto report out warnings that are known to have low false positives.

So if you add new coccinelle scripts that emit accurate enough warnings, it'd be good to inform the LKP team to add the new warnings to our auto-report-out white list.

Quoted 22 lines · Fengguang Wu

Quoted 12 lines · Joel Fernandes

Quoted 2 lines · Greg KH

And do we have a way to add a rule to 0-day to catch these so that they get a warning when they are added again?

They could just be added to scripts/coccinelle and 0-day will report them?

For example, 0-day ran scripts/coccinelle/api/platform_no_drv_owner.cocci on
a recently submitted patch and reported it here:

Quoted 5 lines

https://lore.kernel.org/lkml/201808301856.vMNJerSs%[email protected]/

But I'm not sure if 0-day runs make coccicheck on specific semantic patches,
or runs all of them (CC'd Fengguang).

0-day runs all coccinelle scripts. However only auto report out warnings that are known to have low false positives.

Quoted 3 lines

So if you add new coccinelle scripts that emit accurate enough warnings, it'd be good to inform the LKP team to add the new warnings to our auto-report-out white list.

It runs with MODE=report by default, yes? I'd need to expand the cases to cover that (it is patch-only currently) so that would be a roughly 10,000 line Coccinelle script. :)