stackprotector.h 1.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. /* SPDX-License-Identifier: GPL-2.0 */
  2. /*
  3. * GCC stack protector support.
  4. *
  5. * Stack protector works by putting predefined pattern at the start of
  6. * the stack frame and verifying that it hasn't been overwritten when
  7. * returning from the function. The pattern is called stack canary
  8. * and gcc expects it to be defined by a global variable called
  9. * "__stack_chk_guard" on ARM. This unfortunately means that on SMP
  10. * we cannot have a different canary value per task.
  11. */
  12. #ifndef __ASM_STACKPROTECTOR_H
  13. #define __ASM_STACKPROTECTOR_H
  14. #include <linux/random.h>
  15. #include <linux/version.h>
  16. #include <asm/pointer_auth.h>
  17. extern unsigned long __stack_chk_guard;
  18. /*
  19. * Initialize the stackprotector canary value.
  20. *
  21. * NOTE: this must only be called from functions that never return,
  22. * and it must always be inlined.
  23. */
  24. static __always_inline void boot_init_stack_canary(void)
  25. {
  26. #if defined(CONFIG_STACKPROTECTOR)
  27. unsigned long canary;
  28. /* Try to get a semi random initial value. */
  29. get_random_bytes(&canary, sizeof(canary));
  30. canary ^= LINUX_VERSION_CODE;
  31. canary &= CANARY_MASK;
  32. current->stack_canary = canary;
  33. if (!IS_ENABLED(CONFIG_STACKPROTECTOR_PER_TASK))
  34. __stack_chk_guard = current->stack_canary;
  35. #endif
  36. ptrauth_thread_init_kernel(current);
  37. ptrauth_thread_switch_kernel(current);
  38. ptrauth_enable();
  39. }
  40. #endif /* _ASM_STACKPROTECTOR_H */