diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2022-12-23 12:00:24 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2022-12-23 12:00:24 -0800 |
| commit | 51094a24b85e29138b7fa82ef1e1b4fe19c90046 (patch) | |
| tree | f1ce01b4d655b191a6b96f7caae68976c5e95867 /kernel/panic.c | |
| parent | edb23125fd4a79003012bc619d2c604da922865e (diff) | |
| parent | cf8016408d880afe9c5dc495af40dc2932874e77 (diff) | |
| download | linux-51094a24b85e29138b7fa82ef1e1b4fe19c90046.tar.gz linux-51094a24b85e29138b7fa82ef1e1b4fe19c90046.tar.bz2 linux-51094a24b85e29138b7fa82ef1e1b4fe19c90046.zip | |
Merge tag 'hardening-v6.2-rc1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
Pull kernel hardening fixes from Kees Cook:
- Fix CFI failure with KASAN (Sami Tolvanen)
- Fix LKDTM + CFI under GCC 7 and 8 (Kristina Martsenko)
- Limit CONFIG_ZERO_CALL_USED_REGS to Clang > 15.0.6 (Nathan
Chancellor)
- Ignore "contents" argument in LoadPin's LSM hook handling
- Fix paste-o in /sys/kernel/warn_count API docs
- Use READ_ONCE() consistently for oops/warn limit reading
* tag 'hardening-v6.2-rc1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:
cfi: Fix CFI failure with KASAN
exit: Use READ_ONCE() for all oops/warn limit reads
security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6
lkdtm: cfi: Make PAC test work with GCC 7 and 8
docs: Fix path paste-o for /sys/kernel/warn_count
LoadPin: Ignore the "contents" argument of the LSM hooks
Diffstat (limited to 'kernel/panic.c')
| -rw-r--r-- | kernel/panic.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/kernel/panic.c b/kernel/panic.c index 326d91505f04..463c9295bc28 100644 --- a/kernel/panic.c +++ b/kernel/panic.c @@ -232,12 +232,15 @@ static void panic_print_sys_info(bool console_flush) void check_panic_on_warn(const char *origin) { + unsigned int limit; + if (panic_on_warn) panic("%s: panic_on_warn set ...\n", origin); - if (atomic_inc_return(&warn_count) >= READ_ONCE(warn_limit) && warn_limit) + limit = READ_ONCE(warn_limit); + if (atomic_inc_return(&warn_count) >= limit && limit) panic("%s: system warned too often (kernel.warn_limit is %d)", - origin, warn_limit); + origin, limit); } /** |