Andi Kleen 6cd5513c81 module/retpoline: Warn about missing retpoline in module ... (cherry picked from commit caf7501a1b4ec964190f31f9c3f163de252273b8) There's a risk that a kernel which has full retpoline mitigations becomes vulnerable when a module gets loaded that hasn't been compiled with the right compiler or the right option. To enable detection of that mismatch at module load time, add a module info string "retpoline" at build time when the module was compiled with retpoline support. This only covers compiled C source, but assembler source or prebuilt object files are not checked. If a retpoline enabled kernel detects a non retpoline protected module at load time, print a warning and report it in the sysfs vulnerability file. [ tglx: Massaged changelog ] Signed-off-by: Andi Kleen <ak@linux.intel.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Cc: David Woodhouse <dwmw2@infradead.org> Cc: gregkh@linuxfoundation.org Cc: torvalds@linux-foundation.org Cc: jeyu@kernel.org Cc: arjan@linux.intel.com Link: https://lkml.kernel.org/r/20180125235028.31211-1-andi@firstfloor.org Signed-off-by: David Woodhouse <dwmw@amazon.co.uk> [jwang: port to 4.4] Signed-off-by: Jack Wang <jinpu.wang@profitbricks.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-02-25 11:03:52 +01:00
..
basic	kbuild: fixdep: drop meaningless hash table initialization	2015-08-24 16:36:08 +02:00
coccinelle	scripts/coccinelle: modernize &	2016-04-12 09:09:00 -07:00
dtc	scripts/dtc: Update to upstream version 9d3649bd3be245c9	2015-04-29 17:17:27 -05:00
gdb	scripts/gdb: remove useless global instruction	2015-06-30 19:44:58 -07:00
genksyms	genksyms: Fix segfault with invalid declarations	2018-02-25 11:03:51 +01:00
kconfig	kconfig/nconf: Fix hang when editing symbol with a long prompt	2017-01-09 08:07:53 +01:00
ksymoops
mod	module/retpoline: Warn about missing retpoline in module	2018-02-25 11:03:52 +01:00
package	kbuild: pkg: use --transform option to prefix paths in tar	2017-12-16 10:33:54 +01:00
selinux	selinux: explicitly declare the role "base_r"	2015-07-13 13:32:00 -04:00
tracing
.gitignore	DocBook: Use a fixed encoding for output	2015-09-28 01:31:48 -06:00
analyze_suspend.py
asn1_compiler.c	ASN.1: Copy string names to tokens in ASN.1 compiler	2015-08-07 16:26:13 +01:00
bloat-o-meter	scripts/bloat-o-meter: fix python3 syntax error	2016-02-25 12:01:22 -08:00
bootgraph.pl
check_extable.sh
check-lc_ctype.c	DocBook: Use a fixed encoding for output	2015-09-28 01:31:48 -06:00
checkincludes.pl
checkkconfigsymbols.py	scripts/checkkconfigsymbols.py: support default statements	2015-08-03 17:16:58 -07:00
checkpatch.pl	checkpatch: silence perl 5.26.0 unescaped left brace warnings	2017-07-21 07:44:57 +02:00
checkstack.pl
checksyscalls.sh	x86/asm/entry: Move the arch/x86/syscalls/ definitions to arch/x86/entry/syscalls/	2015-06-04 07:37:37 +02:00
checkversion.pl
cleanfile
cleanpatch
coccicheck	Coccinelle: fix incorrect -include option transformation	2015-10-26 21:32:09 +01:00
config
conmakehash.c
decode_stacktrace.sh	scripts: decode_stacktrace: fix ARM architecture decoding	2015-09-04 16:54:41 -07:00
decodecode
depmod.sh
diffconfig
docproc.c
export_report.pl
extract-cert.c	KEYS: Remove unnecessary header #inclusions from extract-cert.c	2015-09-25 16:31:45 +01:00
extract-ikconfig	scripts/extract-ikconfig: Support LZ4-compressed images.	2015-04-15 14:01:12 +02:00
extract-module-sig.pl	KEYS: Provide a script to extract a module signature	2015-10-21 15:18:36 +01:00
extract-sys-certs.pl	KEYS: Provide a script to extract the sys cert list from a vmlinux file	2015-10-21 15:18:36 +01:00
extract-vmlinux
gcc-goto.sh
gcc-ld
gcc-version.sh
gcc-x86_32-has-stack-protector.sh
gcc-x86_64-has-stack-protector.sh	scripts/has-stack-protector: add -fno-PIE	2016-11-26 09:54:52 +01:00
gen_initramfs_list.sh
get_maintainer.pl	get_maintainer: add subsystem to reviewer output	2015-11-06 17:50:42 -08:00
gfp-translate
headerdep.pl
headers_check.pl
headers_install.sh
headers.sh
kallsyms.c
Kbuild.include	Merge branch 'kbuild' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild	2015-09-08 14:12:19 -07:00
kernel-doc	scripts/kernel-doc: Don't fail with status != 0 if error encountered with -none	2018-02-25 11:03:39 +01:00
kernel-doc-xml-ref	scripts/kernel-doc: Adding cross-reference links to html documentation.	2015-08-16 22:11:16 -06:00
ld-version.sh	ld-version: Fix awk regex compile failure	2016-03-16 08:43:01 -07:00
Lindent	scripts/Lindent: handle missing indent gracefully	2015-09-04 16:54:41 -07:00
link-vmlinux.sh	um: link with -lpthread	2016-03-03 15:07:12 -08:00
Makefile	DocBook: Use a fixed encoding for output	2015-09-28 01:31:48 -06:00
Makefile.asm-generic
Makefile.build	kbuild: modversions for EXPORT_SYMBOL() for asm	2018-01-23 19:50:17 +01:00
Makefile.clean
Makefile.dtbinst
Makefile.extrawarn	kbuild: move -Wunused-const-variable to W=1 warning level	2016-06-01 12:15:54 -07:00
Makefile.fwinst
Makefile.headersinst
Makefile.help
Makefile.host
Makefile.kasan	arm64: add KASAN support	2015-10-12 17:46:36 +01:00
Makefile.lib
Makefile.modbuiltin
Makefile.modinst	modsign: Abort modules_install when signing fails	2015-08-07 16:26:13 +01:00
Makefile.modpost	modpost: Add flag -E for making section mismatches fatal	2015-10-06 10:46:21 +10:30
Makefile.modsign
makelst
markup_oops.pl
mkcompile_h
mkmakefile
mksysmap	mksysmap: Add h8300 local symbol pattern	2015-06-23 13:35:47 +09:00
mkuboot.sh
mkversion
module-common.lds	module: set __jump_table alignment to 8	2017-12-16 10:33:51 +01:00
namespace.pl
objdiff
patch-kernel
pnmtologo.c
profile2linkerlist.pl
recordmcount.c	ftrace/recordmcount: Work around for addition of metag magic but not relocations	2016-08-20 18:09:23 +02:00
recordmcount.h	recordmcount: Fix endianness handling bug for nop_mcount	2015-11-03 10:45:26 -05:00
recordmcount.pl	scripts/recordmcount.pl: support data in text section on powerpc	2016-01-31 11:29:03 -08:00
setlocalversion
show_delta
sign-file.c	MODSIGN: Change from CMS to PKCS#7 signing if the openssl is too old	2015-09-25 16:31:46 +01:00
sortextable.c	Revert "x86/mm: Expand the exception table logic to allow new handling options"	2016-10-31 19:56:26 -06:00
sortextable.h
spelling.txt	scripts/spelling.txt: add some typo-words	2015-09-04 16:54:41 -07:00
stackdelta	scripts: add stackdelta script	2015-08-28 17:04:40 +02:00
stackusage	scripts: add stackusage script	2015-08-28 17:04:40 +02:00
tags.sh	scripts/tags.sh: Teach tags about some powerpc macros	2015-10-13 13:53:57 +02:00
unifdef.c
ver_linux	ver_linux: proc/modules, limit text processing to 'sed'	2015-10-17 21:55:26 -07:00
xen-hypercalls.sh
xz_wrap.sh