From: Kees Cook <kees@kernel•org>
To: Luis Chamberlain <mcgrof@kernel•org>
Cc: "Kees Cook" <kees@kernel•org>,
"Pengpeng Hou" <pengpeng@iscas•ac.cn>,
"Petr Pavlu" <petr.pavlu@suse•com>,
"Richard Weinberger" <richard@nod•at>,
"Anton Ivanov" <anton.ivanov@cambridgegreys•com>,
"Johannes Berg" <johannes@sipsolutions•net>,
"Rafael J. Wysocki" <rafael@kernel•org>,
"Len Brown" <lenb@kernel•org>,
"Corey Minyard" <corey@minyard•net>,
"Gabriel Somlo" <somlo@cmu•edu>,
"Michael S. Tsirkin" <mst@redhat•com>,
"Jani Nikula" <jani.nikula@linux•intel.com>,
"Joonas Lahtinen" <joonas.lahtinen@linux•intel.com>,
"Rodrigo Vivi" <rodrigo.vivi@intel•com>,
"Tvrtko Ursulin" <tursulin@ursulin•net>,
"David Airlie" <airlied@gmail•com>,
"Simona Vetter" <simona@ffwll•ch>,
"Bart Van Assche" <bvanassche@acm•org>,
"Jason Gunthorpe" <jgg@ziepe•ca>,
"Leon Romanovsky" <leon@kernel•org>,
"Laurent Pinchart" <laurent.pinchart@ideasonboard•com>,
"Hans de Goede" <hansg@kernel•org>,
"Mauro Carvalho Chehab" <mchehab@kernel•org>,
"Bjorn Helgaas" <bhelgaas@google•com>,
"Hannes Reinecke" <hare@suse•de>,
"James E.J. Bottomley" <James.Bottomley@HansenPartnership•com>,
"Martin K. Petersen" <martin.petersen@oracle•com>,
"Daniel Lezcano" <daniel.lezcano@kernel•org>,
"Zhang Rui" <rui.zhang@intel•com>,
"Lukasz Luba" <lukasz.luba@arm•com>,
"Greg Kroah-Hartman" <gregkh@linuxfoundation•org>,
"Jiri Slaby" <jirislaby@kernel•org>,
"Alan Stern" <stern@rowland•harvard.edu>,
"Jason Wang" <jasowang@redhat•com>,
"Xuan Zhuo" <xuanzhuo@linux•alibaba.com>,
"Eugenio Pérez" <eperezma@redhat•com>,
"Jason Baron" <jbaron@akamai•com>,
"Jim Cromie" <jim.cromie@gmail•com>,
"Tiwei Bie" <tiwei.btw@antgroup•com>,
"Benjamin Berg" <benjamin.berg@intel•com>,
"Ilpo Järvinen" <ilpo.jarvinen@linux•intel.com>,
"David E. Box" <david.e.box@linux•intel.com>,
"Maciej W. Rozycki" <macro@orcam•me.uk>,
"Srinivas Pandruvada" <srinivas.pandruvada@linux•intel.com>,
"Peter Zijlstra" <peterz@infradead•org>,
"Heiko Carstens" <hca@linux•ibm.com>,
"Vasily Gorbik" <gor@linux•ibm.com>,
"Sean Christopherson" <seanjc@google•com>,
"Paolo Bonzini" <pbonzini@redhat•com>,
"Thomas Gleixner" <tglx@kernel•org>,
"Ingo Molnar" <mingo@redhat•com>,
"Borislav Petkov" <bp@alien8•de>,
"Dave Hansen" <dave.hansen@linux•intel.com>,
x86@kernel•org, "H. Peter Anvin" <hpa@zytor•com>,
"Vinod Koul" <vkoul@kernel•org>, "Frank Li" <Frank.Li@kernel•org>,
"Daniel Gomez" <da.gomez@kernel•org>,
"Sami Tolvanen" <samitolvanen@google•com>,
"Aaron Tomlin" <atomlin@atomlin•com>,
"Alexander Potapenko" <glider@google•com>,
"Marco Elver" <elver@google•com>,
"Dmitry Vyukov" <dvyukov@google•com>,
"Andrew Morton" <akpm@linux-foundation•org>,
"John Johansen" <john.johansen@canonical•com>,
"Paul Moore" <paul@paul-moore•com>,
"James Morris" <jmorris@namei•org>,
"Serge E. Hallyn" <serge@hallyn•com>,
"Andy Shevchenko" <andriy.shevchenko@linux•intel.com>,
"Georgia Garcia" <georgia.garcia@canonical•com>,
kvm@vger•kernel.org, dmaengine@vger•kernel.org,
linux-modules@vger•kernel.org, kasan-dev@googlegroups•com,
linux-mm@kvack•org, apparmor@lists•ubuntu.com,
linux-security-module@vger•kernel.org,
linux-um@lists•infradead.org, linux-acpi@vger•kernel.org,
openipmi-developer@lists•sourceforge.net, qemu-devel@nongnu•org,
intel-gfx@lists•freedesktop.org, dri-devel@lists•freedesktop.org,
linux-rdma@vger•kernel.org, linux-media@vger•kernel.org,
linux-pci@vger•kernel.org, linux-scsi@vger•kernel.org,
linux-pm@vger•kernel.org, linuxppc-dev@lists•ozlabs.org,
linux-serial@vger•kernel.org, linux-usb@vger•kernel.org,
usb-storage@lists•one-eyed-alien.net,
virtualization@lists•linux.dev, linux-kernel@vger•kernel.org,
linux-arch@vger•kernel.org, netdev@vger•kernel.org,
linux-fsdevel@vger•kernel.org, linux-hardening@vger•kernel.org
Subject: [PATCH 00/11] Convert moduleparams to seq_buf
Date: Thu, 21 May 2026 06:33:13 -0700 [thread overview]
Message-ID: <20260521133315.work.845-kees@kernel.org> (raw)
Hi,
I tried to trim the CC list here, but it's still pretty huge...
We've had a long-standing issue with "write to a string pointer" callbacks
that don't bounds check the destination (and for which the bounds is
also not part of the callback prototype, even if it is "known" to be
PAGE_SIZE, which sysfs_emit() depends on). Both moduleparams and sysfs
use this pattern. As a first step, and to test the migration method,
migrate moduleparams first.
There are 2 "mechanical" treewide patches that are handled by Coccinelle:
- treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
- treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
The last treewide patch is manual, and may need to be broken up into
per-subsystem patches, though I'd prefer to avoid this, as it would
extend the migration from 1 relase to at least 2 releases. (1 to
release the migration infrastructure, then 1 release to collect all the
subsystem changes, and possibly 1 more release to remove the migration
infrastructure.)
Thoughts, questions?
-Kees
Kees Cook (10):
panic: Replace panic_print_get() with generic helper
moduleparam: Add DEFINE_KERNEL_PARAM_OPS macro family
treewide: Convert struct kernel_param_ops initializers to
DEFINE_KERNEL_PARAM_OPS
moduleparam: Rename .get field to .get_str
moduleparam: Add seq_buf-based .get callback alongside .get_str
moduleparam: Route DEFINE_KERNEL_PARAM_OPS get pointer via _Generic
params: Convert generic kernel_param_ops .get helpers to seq_buf
treewide: Convert custom kernel_param_ops .get callbacks to seq_buf
via cocci
treewide: Manually convert custom kernel_param_ops .get callbacks
moduleparam: Drop legacy kernel_param_ops .get_str field and dispatch
logic
Pengpeng Hou (1):
params: bound array element output to the caller's page buffer
include/linux/dynamic_debug.h | 8 +-
include/linux/moduleparam.h | 65 +++++++---
security/apparmor/include/lib.h | 3 +-
mm/kfence/core.c | 15 ++-
arch/powerpc/kvm/book3s_hv.c | 5 +-
arch/s390/kernel/perf_cpum_sf.c | 12 +-
arch/um/drivers/vfio_kern.c | 9 +-
arch/um/drivers/virtio_uml.c | 18 +--
arch/x86/kernel/msr.c | 11 +-
arch/x86/kvm/mmu/mmu.c | 28 ++--
arch/x86/kvm/svm/avic.c | 14 +-
arch/x86/kvm/vmx/vmx.c | 24 ++--
arch/x86/platform/uv/uv_nmi.c | 24 ++--
block/disk-events.c | 6 +-
drivers/acpi/button.c | 19 ++-
drivers/acpi/ec.c | 14 +-
drivers/acpi/sysfs.c | 114 ++++++++--------
drivers/block/loop.c | 12 +-
drivers/block/null_blk/main.c | 12 +-
drivers/block/rnbd/rnbd-srv.c | 6 +-
drivers/block/ublk_drv.c | 12 +-
drivers/char/ipmi/ipmi_msghandler.c | 12 +-
drivers/char/ipmi/ipmi_watchdog.c | 50 +++----
drivers/crypto/hisilicon/hpre/hpre_main.c | 16 +--
drivers/crypto/hisilicon/sec2/sec_main.c | 23 +---
drivers/crypto/hisilicon/zip/zip_crypto.c | 5 +-
drivers/crypto/hisilicon/zip/zip_main.c | 21 +--
drivers/dma/dmatest.c | 34 ++---
drivers/edac/i10nm_base.c | 6 +-
drivers/firmware/efi/efi-pstore.c | 6 +-
drivers/firmware/qcom/qcom_scm.c | 18 +--
drivers/firmware/qemu_fw_cfg.c | 40 +++---
drivers/gpu/drm/drm_panic.c | 13 +-
drivers/gpu/drm/i915/i915_mitigations.c | 31 ++---
drivers/gpu/drm/imagination/pvr_fw_trace.c | 6 +-
drivers/hid/hid-cougar.c | 6 +-
drivers/hid/hid-steam.c | 6 +-
drivers/infiniband/hw/hfi1/driver.c | 12 +-
drivers/infiniband/ulp/iser/iscsi_iser.c | 6 +-
drivers/infiniband/ulp/isert/ib_isert.c | 6 +-
drivers/infiniband/ulp/srp/ib_srp.c | 12 +-
drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +-
drivers/input/misc/ati_remote2.c | 23 ++--
drivers/input/mouse/psmouse-base.c | 15 ++-
drivers/md/md.c | 5 +-
drivers/media/pci/tw686x/tw686x-core.c | 6 +-
drivers/media/usb/uvc/uvc_driver.c | 14 +-
drivers/misc/lis3lv02d/lis3lv02d.c | 5 +-
drivers/net/wireless/ath/wil6210/main.c | 10 +-
drivers/nvme/host/multipath.c | 17 +--
drivers/nvme/host/pci.c | 18 +--
drivers/nvme/target/rdma.c | 5 +-
drivers/nvme/target/tcp.c | 5 +-
drivers/pci/pcie/aspm.c | 17 ++-
drivers/platform/x86/acerhdf.c | 5 +-
drivers/power/supply/bq27xxx_battery.c | 6 +-
drivers/power/supply/test_power.c | 122 +++++++++---------
drivers/scsi/fcoe/fcoe_transport.c | 22 ++--
drivers/scsi/sg.c | 6 +-
drivers/target/target_core_user.c | 25 ++--
.../processor_thermal_soc_slider.c | 24 ++--
drivers/thermal/intel/intel_powerclamp.c | 34 ++---
drivers/tty/hvc/hvc_iucv.c | 24 ++--
drivers/tty/sysrq.c | 6 +-
drivers/ufs/core/ufs-fault-injection.c | 12 +-
drivers/ufs/core/ufs-mcq.c | 18 +--
drivers/ufs/core/ufs-txeq.c | 5 +-
drivers/ufs/core/ufshcd.c | 12 +-
drivers/usb/core/quirks.c | 6 +-
drivers/usb/gadget/legacy/serial.c | 5 +-
drivers/usb/storage/usb.c | 25 ++--
drivers/vhost/scsi.c | 12 +-
drivers/virt/nitro_enclaves/ne_misc_dev.c | 6 +-
drivers/virtio/virtio_mmio.c | 27 ++--
fs/ceph/super.c | 10 +-
fs/fuse/dir.c | 5 +-
fs/nfs/namespace.c | 12 +-
fs/nfs/super.c | 6 +-
fs/ocfs2/dlmfs/dlmfs.c | 5 +-
fs/overlayfs/copy_up.c | 5 +-
fs/ubifs/super.c | 6 +-
kernel/locking/locktorture.c | 12 +-
kernel/panic.c | 11 +-
kernel/params.c | 122 +++++++++---------
kernel/power/hibernate.c | 6 +-
kernel/rcu/tree.c | 24 ++--
kernel/sched/ext.c | 11 +-
kernel/workqueue.c | 18 ++-
lib/dynamic_debug.c | 16 ++-
lib/test_dynamic_debug.c | 12 +-
mm/damon/lru_sort.c | 33 +++--
mm/damon/reclaim.c | 33 +++--
mm/damon/stat.c | 16 +--
mm/memory_hotplug.c | 30 +++--
mm/page_reporting.c | 11 +-
mm/shuffle.c | 6 +-
mm/zswap.c | 14 +-
net/batman-adv/bat_algo.c | 6 +-
net/ceph/ceph_common.c | 10 +-
net/ipv4/tcp_dctcp.c | 6 +-
net/sunrpc/auth.c | 12 +-
net/sunrpc/svc.c | 5 +-
net/sunrpc/xprtsock.c | 18 +--
samples/damon/mtier.c | 6 +-
samples/damon/prcl.c | 6 +-
samples/damon/wsse.c | 6 +-
security/apparmor/lib.c | 27 ++--
security/apparmor/lsm.c | 75 +++++------
sound/hda/controllers/intel.c | 5 +-
sound/usb/card.c | 7 +-
110 files changed, 854 insertions(+), 1066 deletions(-)
--
2.34.1
next reply other threads:[~2026-05-21 13:33 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-21 13:33 Kees Cook [this message]
2026-05-21 13:33 ` [PATCH 01/11] params: bound array element output to the caller's page buffer Kees Cook
2026-05-21 16:46 ` David Laight
2026-06-01 20:23 ` Matthew Wilcox
2026-06-02 11:26 ` Andy Shevchenko
2026-06-02 12:33 ` Jason Gunthorpe
2026-06-02 13:04 ` David Laight
2026-05-21 13:33 ` [PATCH 02/11] panic: Replace panic_print_get() with generic helper Kees Cook
2026-05-21 13:33 ` [PATCH 03/11] moduleparam: Add DEFINE_KERNEL_PARAM_OPS macro family Kees Cook
2026-05-25 13:27 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS Kees Cook
2026-05-21 13:59 ` Sean Christopherson
2026-05-22 17:01 ` Rafael J. Wysocki
2026-05-23 0:38 ` SeongJae Park
2026-05-25 13:35 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 05/11] moduleparam: Rename .get field to .get_str Kees Cook
2026-05-21 13:33 ` [PATCH 06/11] moduleparam: Add seq_buf-based .get callback alongside .get_str Kees Cook
2026-05-25 16:19 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 07/11] moduleparam: Route DEFINE_KERNEL_PARAM_OPS get pointer via _Generic Kees Cook
2026-05-25 16:24 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf Kees Cook
2026-05-25 17:10 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci Kees Cook
2026-05-21 13:45 ` Sean Christopherson
2026-05-22 17:03 ` Rafael J. Wysocki
2026-05-23 0:45 ` SeongJae Park
2026-05-21 13:33 ` [PATCH 10/11] treewide: Manually convert custom kernel_param_ops .get callbacks Kees Cook
2026-05-21 17:44 ` Jani Nikula
2026-05-22 17:05 ` Rafael J. Wysocki
2026-05-21 13:33 ` [PATCH 11/11] moduleparam: Drop legacy kernel_param_ops .get_str field and dispatch logic Kees Cook
2026-05-26 6:53 ` [PATCH 00/11] Convert moduleparams to seq_buf Petr Pavlu
2026-06-01 19:59 ` Kees Cook
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260521133315.work.845-kees@kernel.org \
--to=kees@kernel$(echo .)org \
--cc=Frank.Li@kernel$(echo .)org \
--cc=James.Bottomley@HansenPartnership$(echo .)com \
--cc=airlied@gmail$(echo .)com \
--cc=akpm@linux-foundation$(echo .)org \
--cc=andriy.shevchenko@linux$(echo .)intel.com \
--cc=anton.ivanov@cambridgegreys$(echo .)com \
--cc=apparmor@lists$(echo .)ubuntu.com \
--cc=atomlin@atomlin$(echo .)com \
--cc=benjamin.berg@intel$(echo .)com \
--cc=bhelgaas@google$(echo .)com \
--cc=bp@alien8$(echo .)de \
--cc=bvanassche@acm$(echo .)org \
--cc=corey@minyard$(echo .)net \
--cc=da.gomez@kernel$(echo .)org \
--cc=daniel.lezcano@kernel$(echo .)org \
--cc=dave.hansen@linux$(echo .)intel.com \
--cc=david.e.box@linux$(echo .)intel.com \
--cc=dmaengine@vger$(echo .)kernel.org \
--cc=dri-devel@lists$(echo .)freedesktop.org \
--cc=dvyukov@google$(echo .)com \
--cc=elver@google$(echo .)com \
--cc=eperezma@redhat$(echo .)com \
--cc=georgia.garcia@canonical$(echo .)com \
--cc=glider@google$(echo .)com \
--cc=gor@linux$(echo .)ibm.com \
--cc=gregkh@linuxfoundation$(echo .)org \
--cc=hansg@kernel$(echo .)org \
--cc=hare@suse$(echo .)de \
--cc=hca@linux$(echo .)ibm.com \
--cc=hpa@zytor$(echo .)com \
--cc=ilpo.jarvinen@linux$(echo .)intel.com \
--cc=intel-gfx@lists$(echo .)freedesktop.org \
--cc=jani.nikula@linux$(echo .)intel.com \
--cc=jasowang@redhat$(echo .)com \
--cc=jbaron@akamai$(echo .)com \
--cc=jgg@ziepe$(echo .)ca \
--cc=jim.cromie@gmail$(echo .)com \
--cc=jirislaby@kernel$(echo .)org \
--cc=jmorris@namei$(echo .)org \
--cc=johannes@sipsolutions$(echo .)net \
--cc=john.johansen@canonical$(echo .)com \
--cc=joonas.lahtinen@linux$(echo .)intel.com \
--cc=kasan-dev@googlegroups$(echo .)com \
--cc=kvm@vger$(echo .)kernel.org \
--cc=laurent.pinchart@ideasonboard$(echo .)com \
--cc=lenb@kernel$(echo .)org \
--cc=leon@kernel$(echo .)org \
--cc=linux-acpi@vger$(echo .)kernel.org \
--cc=linux-arch@vger$(echo .)kernel.org \
--cc=linux-fsdevel@vger$(echo .)kernel.org \
--cc=linux-hardening@vger$(echo .)kernel.org \
--cc=linux-kernel@vger$(echo .)kernel.org \
--cc=linux-media@vger$(echo .)kernel.org \
--cc=linux-mm@kvack$(echo .)org \
--cc=linux-modules@vger$(echo .)kernel.org \
--cc=linux-pci@vger$(echo .)kernel.org \
--cc=linux-pm@vger$(echo .)kernel.org \
--cc=linux-rdma@vger$(echo .)kernel.org \
--cc=linux-scsi@vger$(echo .)kernel.org \
--cc=linux-security-module@vger$(echo .)kernel.org \
--cc=linux-serial@vger$(echo .)kernel.org \
--cc=linux-um@lists$(echo .)infradead.org \
--cc=linux-usb@vger$(echo .)kernel.org \
--cc=linuxppc-dev@lists$(echo .)ozlabs.org \
--cc=lukasz.luba@arm$(echo .)com \
--cc=macro@orcam$(echo .)me.uk \
--cc=martin.petersen@oracle$(echo .)com \
--cc=mcgrof@kernel$(echo .)org \
--cc=mchehab@kernel$(echo .)org \
--cc=mingo@redhat$(echo .)com \
--cc=mst@redhat$(echo .)com \
--cc=netdev@vger$(echo .)kernel.org \
--cc=openipmi-developer@lists$(echo .)sourceforge.net \
--cc=paul@paul-moore$(echo .)com \
--cc=pbonzini@redhat$(echo .)com \
--cc=pengpeng@iscas$(echo .)ac.cn \
--cc=peterz@infradead$(echo .)org \
--cc=petr.pavlu@suse$(echo .)com \
--cc=qemu-devel@nongnu$(echo .)org \
--cc=rafael@kernel$(echo .)org \
--cc=richard@nod$(echo .)at \
--cc=rodrigo.vivi@intel$(echo .)com \
--cc=rui.zhang@intel$(echo .)com \
--cc=samitolvanen@google$(echo .)com \
--cc=seanjc@google$(echo .)com \
--cc=serge@hallyn$(echo .)com \
--cc=simona@ffwll$(echo .)ch \
--cc=somlo@cmu$(echo .)edu \
--cc=srinivas.pandruvada@linux$(echo .)intel.com \
--cc=stern@rowland$(echo .)harvard.edu \
--cc=tglx@kernel$(echo .)org \
--cc=tiwei.btw@antgroup$(echo .)com \
--cc=tursulin@ursulin$(echo .)net \
--cc=usb-storage@lists$(echo .)one-eyed-alien.net \
--cc=virtualization@lists$(echo .)linux.dev \
--cc=vkoul@kernel$(echo .)org \
--cc=x86@kernel$(echo .)org \
--cc=xuanzhuo@linux$(echo .)alibaba.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox