From: Kees Cook <kees@kernel•org>
To: Petr Pavlu <petr.pavlu@suse•com>
Cc: "Luis Chamberlain" <mcgrof@kernel•org>,
"Pengpeng Hou" <pengpeng@iscas•ac.cn>,
"Richard Weinberger" <richard@nod•at>,
"Anton Ivanov" <anton.ivanov@cambridgegreys•com>,
"Johannes Berg" <johannes@sipsolutions•net>,
"Rafael J. Wysocki" <rafael@kernel•org>,
"Len Brown" <lenb@kernel•org>,
"Corey Minyard" <corey@minyard•net>,
"Gabriel Somlo" <somlo@cmu•edu>,
"Michael S. Tsirkin" <mst@redhat•com>,
"Jani Nikula" <jani.nikula@linux•intel.com>,
"Joonas Lahtinen" <joonas.lahtinen@linux•intel.com>,
"Rodrigo Vivi" <rodrigo.vivi@intel•com>,
"Tvrtko Ursulin" <tursulin@ursulin•net>,
"David Airlie" <airlied@gmail•com>,
"Simona Vetter" <simona@ffwll•ch>,
"Bart Van Assche" <bvanassche@acm•org>,
"Jason Gunthorpe" <jgg@ziepe•ca>,
"Leon Romanovsky" <leon@kernel•org>,
"Laurent Pinchart" <laurent.pinchart@ideasonboard•com>,
"Hans de Goede" <hansg@kernel•org>,
"Mauro Carvalho Chehab" <mchehab@kernel•org>,
"Bjorn Helgaas" <bhelgaas@google•com>,
"Hannes Reinecke" <hare@suse•de>,
"James E.J. Bottomley" <James.Bottomley@hansenpartnership•com>,
"Martin K. Petersen" <martin.petersen@oracle•com>,
"Daniel Lezcano" <daniel.lezcano@kernel•org>,
"Zhang Rui" <rui.zhang@intel•com>,
"Lukasz Luba" <lukasz.luba@arm•com>,
"Greg Kroah-Hartman" <gregkh@linuxfoundation•org>,
"Jiri Slaby" <jirislaby@kernel•org>,
"Alan Stern" <stern@rowland•harvard.edu>,
"Jason Wang" <jasowang@redhat•com>,
"Xuan Zhuo" <xuanzhuo@linux•alibaba.com>,
"Eugenio Pérez" <eperezma@redhat•com>,
"Jason Baron" <jbaron@akamai•com>,
"Jim Cromie" <jim.cromie@gmail•com>,
"Tiwei Bie" <tiwei.btw@antgroup•com>,
"Benjamin Berg" <benjamin.berg@intel•com>,
"Ilpo Järvinen" <ilpo.jarvinen@linux•intel.com>,
"David E. Box" <david.e.box@linux•intel.com>,
"Maciej W. Rozycki" <macro@orcam•me.uk>,
"Srinivas Pandruvada" <srinivas.pandruvada@linux•intel.com>,
"Peter Zijlstra" <peterz@infradead•org>,
"Heiko Carstens" <hca@linux•ibm.com>,
"Vasily Gorbik" <gor@linux•ibm.com>,
"Sean Christopherson" <seanjc@google•com>,
"Paolo Bonzini" <pbonzini@redhat•com>,
"Thomas Gleixner" <tglx@kernel•org>,
"Ingo Molnar" <mingo@redhat•com>,
"Borislav Petkov" <bp@alien8•de>,
"Dave Hansen" <dave.hansen@linux•intel.com>,
x86@kernel•org, "H. Peter Anvin" <hpa@zytor•com>,
"Vinod Koul" <vkoul@kernel•org>, "Frank Li" <Frank.Li@kernel•org>,
"Daniel Gomez" <da.gomez@kernel•org>,
"Sami Tolvanen" <samitolvanen@google•com>,
"Aaron Tomlin" <atomlin@atomlin•com>,
"Alexander Potapenko" <glider@google•com>,
"Marco Elver" <elver@google•com>,
"Dmitry Vyukov" <dvyukov@google•com>,
"Andrew Morton" <akpm@linux-foundation•org>,
"John Johansen" <john.johansen@canonical•com>,
"Paul Moore" <paul@paul-moore•com>,
"James Morris" <jmorris@namei•org>,
"Serge E. Hallyn" <serge@hallyn•com>,
"Andy Shevchenko" <andriy.shevchenko@linux•intel.com>,
"Georgia Garcia" <georgia.garcia@canonical•com>,
kvm@vger•kernel.org, dmaengine@vger•kernel.org,
linux-modules@vger•kernel.org, kasan-dev@googlegroups•com,
linux-mm@kvack•org, apparmor@lists•ubuntu.com,
linux-security-module@vger•kernel.org,
linux-um@lists•infradead.org, linux-acpi@vger•kernel.org,
openipmi-developer@lists•sourceforge.net, qemu-devel@nongnu•org,
intel-gfx@lists•freedesktop.org, dri-devel@lists•freedesktop.org,
linux-rdma@vger•kernel.org, linux-media@vger•kernel.org,
linux-pci@vger•kernel.org, linux-scsi@vger•kernel.org,
linux-pm@vger•kernel.org, linuxppc-dev@lists•ozlabs.org,
linux-serial@vger•kernel.org, linux-usb@vger•kernel.org,
usb-storage@lists•one-eyed-alien.net,
virtualization@lists•linux.dev, linux-kernel@vger•kernel.org,
linux-arch@vger•kernel.org, netdev@vger•kernel.org,
linux-fsdevel@vger•kernel.org, linux-hardening@vger•kernel.org
Subject: Re: [PATCH 00/11] Convert moduleparams to seq_buf
Date: Mon, 1 Jun 2026 12:59:49 -0700 [thread overview]
Message-ID: <202606011259.CE6E74CE@keescook> (raw)
In-Reply-To: <88c5ca1d-eeda-4023-bc7a-397b92780db9@suse.com>
On Tue, May 26, 2026 at 08:53:06AM +0200, Petr Pavlu wrote:
> On 5/21/26 3:33 PM, Kees Cook wrote:
> > Hi,
> >
> > I tried to trim the CC list here, but it's still pretty huge...
> >
> > We've had a long-standing issue with "write to a string pointer" callbacks
> > that don't bounds check the destination (and for which the bounds is
> > also not part of the callback prototype, even if it is "known" to be
> > PAGE_SIZE, which sysfs_emit() depends on). Both moduleparams and sysfs
> > use this pattern. As a first step, and to test the migration method,
> > migrate moduleparams first.
> >
> > There are 2 "mechanical" treewide patches that are handled by Coccinelle:
> > - treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
> > - treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
> >
> > The last treewide patch is manual, and may need to be broken up into
> > per-subsystem patches, though I'd prefer to avoid this, as it would
> > extend the migration from 1 relase to at least 2 releases. (1 to
> > release the migration infrastructure, then 1 release to collect all the
> > subsystem changes, and possibly 1 more release to remove the migration
> > infrastructure.)
> >
> > Thoughts, questions?
>
> This looks reasonable to me. I added a few minor comments on the patches
> but they already look solid.
Thanks for the review! I'll get a v2 prepared with your notes addressed. :)
-Kees
--
Kees Cook
prev parent reply other threads:[~2026-06-01 19:59 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-21 13:33 [PATCH 00/11] Convert moduleparams to seq_buf Kees Cook
2026-05-21 13:33 ` [PATCH 01/11] params: bound array element output to the caller's page buffer Kees Cook
2026-05-21 16:46 ` David Laight
2026-06-01 20:23 ` Matthew Wilcox
2026-06-02 11:26 ` Andy Shevchenko
2026-06-02 12:33 ` Jason Gunthorpe
2026-06-02 13:04 ` David Laight
2026-05-21 13:33 ` [PATCH 02/11] panic: Replace panic_print_get() with generic helper Kees Cook
2026-05-21 13:33 ` [PATCH 03/11] moduleparam: Add DEFINE_KERNEL_PARAM_OPS macro family Kees Cook
2026-05-25 13:27 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS Kees Cook
2026-05-21 13:59 ` Sean Christopherson
2026-05-22 17:01 ` Rafael J. Wysocki
2026-05-23 0:38 ` SeongJae Park
2026-05-25 13:35 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 05/11] moduleparam: Rename .get field to .get_str Kees Cook
2026-05-21 13:33 ` [PATCH 06/11] moduleparam: Add seq_buf-based .get callback alongside .get_str Kees Cook
2026-05-25 16:19 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 07/11] moduleparam: Route DEFINE_KERNEL_PARAM_OPS get pointer via _Generic Kees Cook
2026-05-25 16:24 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf Kees Cook
2026-05-25 17:10 ` Petr Pavlu
2026-05-21 13:33 ` [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci Kees Cook
2026-05-21 13:45 ` Sean Christopherson
2026-05-22 17:03 ` Rafael J. Wysocki
2026-05-23 0:45 ` SeongJae Park
2026-05-21 13:33 ` [PATCH 10/11] treewide: Manually convert custom kernel_param_ops .get callbacks Kees Cook
2026-05-21 17:44 ` Jani Nikula
2026-05-22 17:05 ` Rafael J. Wysocki
2026-05-21 13:33 ` [PATCH 11/11] moduleparam: Drop legacy kernel_param_ops .get_str field and dispatch logic Kees Cook
2026-05-26 6:53 ` [PATCH 00/11] Convert moduleparams to seq_buf Petr Pavlu
2026-06-01 19:59 ` Kees Cook [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=202606011259.CE6E74CE@keescook \
--to=kees@kernel$(echo .)org \
--cc=Frank.Li@kernel$(echo .)org \
--cc=James.Bottomley@hansenpartnership$(echo .)com \
--cc=airlied@gmail$(echo .)com \
--cc=akpm@linux-foundation$(echo .)org \
--cc=andriy.shevchenko@linux$(echo .)intel.com \
--cc=anton.ivanov@cambridgegreys$(echo .)com \
--cc=apparmor@lists$(echo .)ubuntu.com \
--cc=atomlin@atomlin$(echo .)com \
--cc=benjamin.berg@intel$(echo .)com \
--cc=bhelgaas@google$(echo .)com \
--cc=bp@alien8$(echo .)de \
--cc=bvanassche@acm$(echo .)org \
--cc=corey@minyard$(echo .)net \
--cc=da.gomez@kernel$(echo .)org \
--cc=daniel.lezcano@kernel$(echo .)org \
--cc=dave.hansen@linux$(echo .)intel.com \
--cc=david.e.box@linux$(echo .)intel.com \
--cc=dmaengine@vger$(echo .)kernel.org \
--cc=dri-devel@lists$(echo .)freedesktop.org \
--cc=dvyukov@google$(echo .)com \
--cc=elver@google$(echo .)com \
--cc=eperezma@redhat$(echo .)com \
--cc=georgia.garcia@canonical$(echo .)com \
--cc=glider@google$(echo .)com \
--cc=gor@linux$(echo .)ibm.com \
--cc=gregkh@linuxfoundation$(echo .)org \
--cc=hansg@kernel$(echo .)org \
--cc=hare@suse$(echo .)de \
--cc=hca@linux$(echo .)ibm.com \
--cc=hpa@zytor$(echo .)com \
--cc=ilpo.jarvinen@linux$(echo .)intel.com \
--cc=intel-gfx@lists$(echo .)freedesktop.org \
--cc=jani.nikula@linux$(echo .)intel.com \
--cc=jasowang@redhat$(echo .)com \
--cc=jbaron@akamai$(echo .)com \
--cc=jgg@ziepe$(echo .)ca \
--cc=jim.cromie@gmail$(echo .)com \
--cc=jirislaby@kernel$(echo .)org \
--cc=jmorris@namei$(echo .)org \
--cc=johannes@sipsolutions$(echo .)net \
--cc=john.johansen@canonical$(echo .)com \
--cc=joonas.lahtinen@linux$(echo .)intel.com \
--cc=kasan-dev@googlegroups$(echo .)com \
--cc=kvm@vger$(echo .)kernel.org \
--cc=laurent.pinchart@ideasonboard$(echo .)com \
--cc=lenb@kernel$(echo .)org \
--cc=leon@kernel$(echo .)org \
--cc=linux-acpi@vger$(echo .)kernel.org \
--cc=linux-arch@vger$(echo .)kernel.org \
--cc=linux-fsdevel@vger$(echo .)kernel.org \
--cc=linux-hardening@vger$(echo .)kernel.org \
--cc=linux-kernel@vger$(echo .)kernel.org \
--cc=linux-media@vger$(echo .)kernel.org \
--cc=linux-mm@kvack$(echo .)org \
--cc=linux-modules@vger$(echo .)kernel.org \
--cc=linux-pci@vger$(echo .)kernel.org \
--cc=linux-pm@vger$(echo .)kernel.org \
--cc=linux-rdma@vger$(echo .)kernel.org \
--cc=linux-scsi@vger$(echo .)kernel.org \
--cc=linux-security-module@vger$(echo .)kernel.org \
--cc=linux-serial@vger$(echo .)kernel.org \
--cc=linux-um@lists$(echo .)infradead.org \
--cc=linux-usb@vger$(echo .)kernel.org \
--cc=linuxppc-dev@lists$(echo .)ozlabs.org \
--cc=lukasz.luba@arm$(echo .)com \
--cc=macro@orcam$(echo .)me.uk \
--cc=martin.petersen@oracle$(echo .)com \
--cc=mcgrof@kernel$(echo .)org \
--cc=mchehab@kernel$(echo .)org \
--cc=mingo@redhat$(echo .)com \
--cc=mst@redhat$(echo .)com \
--cc=netdev@vger$(echo .)kernel.org \
--cc=openipmi-developer@lists$(echo .)sourceforge.net \
--cc=paul@paul-moore$(echo .)com \
--cc=pbonzini@redhat$(echo .)com \
--cc=pengpeng@iscas$(echo .)ac.cn \
--cc=peterz@infradead$(echo .)org \
--cc=petr.pavlu@suse$(echo .)com \
--cc=qemu-devel@nongnu$(echo .)org \
--cc=rafael@kernel$(echo .)org \
--cc=richard@nod$(echo .)at \
--cc=rodrigo.vivi@intel$(echo .)com \
--cc=rui.zhang@intel$(echo .)com \
--cc=samitolvanen@google$(echo .)com \
--cc=seanjc@google$(echo .)com \
--cc=serge@hallyn$(echo .)com \
--cc=simona@ffwll$(echo .)ch \
--cc=somlo@cmu$(echo .)edu \
--cc=srinivas.pandruvada@linux$(echo .)intel.com \
--cc=stern@rowland$(echo .)harvard.edu \
--cc=tglx@kernel$(echo .)org \
--cc=tiwei.btw@antgroup$(echo .)com \
--cc=tursulin@ursulin$(echo .)net \
--cc=usb-storage@lists$(echo .)one-eyed-alien.net \
--cc=virtualization@lists$(echo .)linux.dev \
--cc=vkoul@kernel$(echo .)org \
--cc=x86@kernel$(echo .)org \
--cc=xuanzhuo@linux$(echo .)alibaba.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox