From: "Thomas Weißschuh" <linux@weissschuh.net>
To: Solar Designer <solar@openwall.com>
Cc: Joel Granados <j.granados@samsung.com>,
Linus Torvalds <torvalds@linux-foundation.org>,
Luis Chamberlain <mcgrof@kernel.org>,
Jeff Johnson <quic_jjohnson@quicinc.com>,
Kees Cook <keescook@chromium.org>, Wen Yang <wen.yang@linux.dev>,
linux-kernel@vger.kernel.org, linux-fsdevel@vger.kernel.org
Subject: Re: [GIT PULL] sysctl changes for v6.11-rc1
Date: Tue, 6 Aug 2024 21:24:33 +0200 [thread overview]
Message-ID: <97a52396-3b86-47a5-ae02-8a979f6fc375@t-8ch.de> (raw)
In-Reply-To: <20240806185736.GA29664@openwall.com>
On 2024-08-06 20:57:37+0000, Solar Designer wrote:
> On Tue, Jul 16, 2024 at 04:16:56PM +0200, Joel Granados wrote:
> > sysctl changes for 6.11-rc1
> >
> > Summary
> >
> > * Remove "->procname == NULL" check when iterating through sysctl table arrays
> >
> > Removing sentinels in ctl_table arrays reduces the build time size and
> > runtime memory consumed by ~64 bytes per array. With all ctl_table
> > sentinels gone, the additional check for ->procname == NULL that worked in
> > tandem with the ARRAY_SIZE to calculate the size of the ctl_table arrays is
> > no longer needed and has been removed. The sysctl register functions now
> > returns an error if a sentinel is used.
> >
> > * Preparation patches for sysctl constification
> >
> > Constifying ctl_table structs prevents the modification of proc_handler
> > function pointers as they would reside in .rodata. The ctl_table arguments
> > in sysctl utility functions are const qualified in preparation for a future
> > treewide proc_handler argument constification commit.
>
> As (I assume it was) expected, these changes broke out-of-tree modules.
> For LKRG, I am repairing this by adding "#if LINUX_VERSION_CODE >=
> KERNEL_VERSION(6,11,0)" checks around the corresponding module changes.
> This works. However, I wonder if it would possibly be better for the
> kernel to introduce a corresponding "feature test macro" (or two, for
> the two changes above). I worry that these changes (or some of them)
> could get backported to stable/longterm, which with the 6.11+ checks
> would unnecessarily break out-of-tree modules again (and again and again
> for each backport to a different kernel branch). Feature test macro(s)
> would avoid such further breakage, as they would (be supposed to be)
> included along with the backports.
I don't see any of these changes being backported.
The removal of the "->procname == NULL" check depends on all in-kernel
tables being registered with an explicit size, which is not the case on
old kernels. So a backport would not only silently fail for external
modules but also for internal code.
The same for the constification patches but with build errors instead of
runtime errors.
My future sysctl constification patches will be backwards compatible at
both compiletime and runtime, for both internal and external code.
So the version checks should be enough here.
next prev parent reply other threads:[~2024-08-06 19:24 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <CGME20240716141703eucas1p2f6ddaf91b7363dd893d37b9aa8987dc6@eucas1p2.samsung.com>
2024-07-16 14:16 ` Joel Granados
2024-07-16 18:13 ` Kees Cook
2024-07-17 19:46 ` Joel Granados
2024-07-17 20:05 ` Thomas Weißschuh
2024-07-17 22:15 ` Kees Cook
2024-07-16 21:43 ` pr-tracker-bot
2024-08-06 18:57 ` Solar Designer
2024-08-06 19:02 ` Linus Torvalds
2024-08-06 19:24 ` Thomas Weißschuh [this message]
2024-08-13 20:52 ` Joel Granados
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=97a52396-3b86-47a5-ae02-8a979f6fc375@t-8ch.de \
--to=linux@weissschuh.net \
--cc=j.granados@samsung.com \
--cc=keescook@chromium.org \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=mcgrof@kernel.org \
--cc=quic_jjohnson@quicinc.com \
--cc=solar@openwall.com \
--cc=torvalds@linux-foundation.org \
--cc=wen.yang@linux.dev \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®