[PATCH v4 0/3] arm64: EFI stub isolation

2015-10-08 Thread Ard Biesheuvel
We need to ensure that the EFI stub only uses parts of the kernel proper that are safe to use when the kernel virtual mapping is not active yet. So move all C code dependencies to the libstub, which is built with all instrumentation (gcov, kasan) disabled, and do a verification pass to ensure that

[PATCH v4 3/3] arm64/efi: isolate EFI stub from the kernel proper

2015-10-08 Thread Ard Biesheuvel
Since arm64 does not use a builtin decompressor, the EFI stub is built into the kernel proper. So far, this has been working fine, but actually, since the stub is in fact a PE/COFF relocatable binary that is executed at an unknown offset in the 1:1 mapping provided by the UEFI firmware, we should n

[PATCH v4 2/3] arm64: use ENDPIPROC() to annotate position independent assembler routines

2015-10-08 Thread Ard Biesheuvel
For more control over which functions are called with the MMU off or with the UEFI 1:1 mapping active, annotate some assembler routines as position independent. This is done by introducing ENDPIPROC(), which replaces the ENDPROC() declaration of those routines. Signed-off-by: Ard Biesheuvel ---

[PATCH v4 1/3] arm64/efi: remove /chosen/linux,uefi-stub-kern-ver DT property

2015-10-08 Thread Ard Biesheuvel
With the stub to kernel interface being promoted to a proper interface so that other agents than the stub can boot the kernel proper in EFI mode, we can remove the linux,uefi-stub-kern-ver field, considering that its original purpose was to prevent this from happening in the first place. Signed-of

Re: [PATCH v3 0/3] arm64: EFI stub isolation

2015-10-08 Thread Catalin Marinas
On Tue, Oct 06, 2015 at 12:03:41PM +0100, Ard Biesheuvel wrote: > We need to ensure that the EFI stub only uses parts of the kernel proper > that are safe to use when the kernel virtual mapping is not active yet. > > So move all C code dependencies to the libstub, and do a verification pass > to e

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Andrey Ryabinin
2015-10-08 18:11 GMT+03:00 Catalin Marinas : > On Thu, Oct 08, 2015 at 02:09:26PM +0200, Ard Biesheuvel wrote: >> On 8 October 2015 at 13:23, Andrey Ryabinin wrote: >> > On 10/08/2015 02:11 PM, Mark Rutland wrote: >> >> On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote: >> >>> 2015-1

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Ard Biesheuvel
(+ Matt) On 8 October 2015 at 17:11, Catalin Marinas wrote: > On Thu, Oct 08, 2015 at 02:09:26PM +0200, Ard Biesheuvel wrote: >> On 8 October 2015 at 13:23, Andrey Ryabinin wrote: >> > On 10/08/2015 02:11 PM, Mark Rutland wrote: >> >> On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wro

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Catalin Marinas
On Thu, Oct 08, 2015 at 02:09:26PM +0200, Ard Biesheuvel wrote: > On 8 October 2015 at 13:23, Andrey Ryabinin wrote: > > On 10/08/2015 02:11 PM, Mark Rutland wrote: > >> On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote: > >>> 2015-10-07 13:04 GMT+03:00 Catalin Marinas : > On Th

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Ard Biesheuvel
On 8 October 2015 at 13:23, Andrey Ryabinin wrote: > On 10/08/2015 02:11 PM, Mark Rutland wrote: >> On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote: >>> 2015-10-07 13:04 GMT+03:00 Catalin Marinas : On Thu, Sep 17, 2015 at 12:38:06PM +0300, Andrey Ryabinin wrote: > As usual

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Andrey Ryabinin
On 10/08/2015 02:11 PM, Mark Rutland wrote: > On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote: >> 2015-10-07 13:04 GMT+03:00 Catalin Marinas : >>> On Thu, Sep 17, 2015 at 12:38:06PM +0300, Andrey Ryabinin wrote: As usual patches available in git git://github.com/arya

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Mark Rutland
On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote: > 2015-10-07 13:04 GMT+03:00 Catalin Marinas : > > On Thu, Sep 17, 2015 at 12:38:06PM +0300, Andrey Ryabinin wrote: > >> As usual patches available in git > >> git://github.com/aryabinin/linux.git kasan/arm64v6 > >> > >> Changes

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Mark Rutland
On Thu, Oct 08, 2015 at 01:36:09PM +0300, Andrey Ryabinin wrote: > 2015-10-07 13:04 GMT+03:00 Catalin Marinas : > > On Thu, Sep 17, 2015 at 12:38:06PM +0300, Andrey Ryabinin wrote: > >> As usual patches available in git > >> git://github.com/aryabinin/linux.git kasan/arm64v6 > >> > >> Changes

Re: [PATCH v8 0/2] Enable capsule loader interface for efi firmware updating

2015-10-08 Thread Bryan O'Donoghue
On 08/10/15 04:50, Kweh, Hock Leong wrote: -Original Message- From: Bryan O'Donoghue [mailto:pure.lo...@nexus-software.ie] Sent: Wednesday, October 07, 2015 11:00 PM Wilson. Same question as at V7. If you aren't supporting the MFH on Galileo then what capsule are you using with 0.75 BIO

Re: [PATCH v6 0/6] KASAN for arm64

2015-10-08 Thread Andrey Ryabinin
2015-10-07 13:04 GMT+03:00 Catalin Marinas : > On Thu, Sep 17, 2015 at 12:38:06PM +0300, Andrey Ryabinin wrote: >> As usual patches available in git >> git://github.com/aryabinin/linux.git kasan/arm64v6 >> >> Changes since v5: >> - Rebase on top of 4.3-rc1 >> - Fixed EFI boot. >> - Updated