Re: [PATCH] KVM: arm64: vgic-its: Remove VLA usage

2018-07-09 Thread Kees Cook
On Mon, Jul 9, 2018 at 3:47 AM, Marc Zyngier wrote: > Hi kees, > > On 02/07/18 18:15, Kees Cook wrote: >> On Mon, Jul 2, 2018 at 12:36 AM, Auger Eric wrote: >>> Hi Kees, >>> >>> On 06/29/2018 08:46 PM, Kees Cook wrote: In the quest to remove all stack VLA usage from the kernel[1], this

Re: [PATCH] KVM: arm64: vgic-its: Remove VLA usage

2018-07-09 Thread Marc Zyngier
Hi kees, On 02/07/18 18:15, Kees Cook wrote: > On Mon, Jul 2, 2018 at 12:36 AM, Auger Eric wrote: >> Hi Kees, >> >> On 06/29/2018 08:46 PM, Kees Cook wrote: >>> In the quest to remove all stack VLA usage from the kernel[1], this >>> switches to using a maximum size and adds sanity checks. Additio

Re: [PATCH] KVM: arm64: vgic-its: Remove VLA usage

2018-07-02 Thread Kees Cook
On Mon, Jul 2, 2018 at 12:36 AM, Auger Eric wrote: > Hi Kees, > > On 06/29/2018 08:46 PM, Kees Cook wrote: >> In the quest to remove all stack VLA usage from the kernel[1], this >> switches to using a maximum size and adds sanity checks. Additionally >> cleans up some of the int-vs-u32 usage and a

Re: [PATCH] KVM: arm64: vgic-its: Remove VLA usage

2018-07-02 Thread Auger Eric
Hi Kees, On 06/29/2018 08:46 PM, Kees Cook wrote: > In the quest to remove all stack VLA usage from the kernel[1], this > switches to using a maximum size and adds sanity checks. Additionally > cleans up some of the int-vs-u32 usage and adds additional bounds checking. > As it currently stands, th

Re: [PATCH] KVM: arm64: vgic-its: Remove VLA usage

2018-06-29 Thread Arnd Bergmann
On Fri, Jun 29, 2018 at 8:46 PM, Kees Cook wrote: > In the quest to remove all stack VLA usage from the kernel[1], this > switches to using a maximum size and adds sanity checks. Additionally > cleans up some of the int-vs-u32 usage and adds additional bounds checking. > As it currently stands, th

[PATCH] KVM: arm64: vgic-its: Remove VLA usage

2018-06-29 Thread Kees Cook
In the quest to remove all stack VLA usage from the kernel[1], this switches to using a maximum size and adds sanity checks. Additionally cleans up some of the int-vs-u32 usage and adds additional bounds checking. As it currently stands, this will always be 8 bytes until the ABI changes. [1] http