ARM: uaccess: Implement strict user copy checks
in [Kernel]
|
Prev: [GIT PULL] Ceph updates for 2.6.36-rc1
Next: usb 2.0 em28xx kernel panic general protection fault: 0000 [#1] SMP RIP: 0010:[<ffffffffa004fbc5>] [<ffffffffa004fbc5>] em28xx_isoc_copy_vbi+0x62e/0x812 [em28xx]
From: Arnd Bergmann on 12 Aug 2010 11:10 On Wednesday 11 August 2010, Stephen Boyd wrote: > On 08/10/2010 08:04 PM, Arnd Bergmann wrote: > > > > Do you actually need to disable this if running an older gcc? AFAICT, it > > should just have no effect at all in that case, so the comment is slightly > > misleading. > > I blindly copied the help text from x86. Will fix to be less misleading. Ok, I didn't realize that x86 is also doing this as an optional error. My comment was obviously not about your copy then but about the comment in general. Since it would be good to diverge, please leave the patch as it is then and do a new patch that fixes the message on all architectures at the same time. > > Also, why turn this specific warning into an error but not any of the other > > warnings? Some architectures (alpha, sparc, mips, powerpc, sh) simply turn > > on -Werror for architecture specific code in general, which seems very > > useful. We can also make that a config option (probably arch independent) > > that we turn on for defconfig files that we know build without warnings. > > > > Unfortunately, there is a number of device drivers that have never been > > warning-free, so we can't just enable -Werror for all code. > > > > I'm following the x86 implementation. I suppose it's done this way since > many drivers aren't warning free (as you mention) and turning on -Werror > will make it more annoying to find these types of errors. Since there > isn't any -Werror=user-copy this approach allows us to find this type of > error easily without having to sift through noise. > > Enabling -Werror in architecture specific code wouldn't help much here > though right since this is going to be inlined into drivers and such? My point was that I don't think we should single out this particular warning and make it an error, while there are other equally important warnings. Again, this is directed more at the original code from Arjan than your copy for the ARM architecture. I agree that it may be helpful to turn more warnings into errors, but I don't think we should do this on this level of detail (one Kconfig option per warning). Your patch should just go in unmodified, but I'd also suggest generalizing this a bit more on all architectures. Arnd -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo(a)vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ |