[openwrt/openwrt] kernel: Activate CONFIG_LIST_HARDENED

LEDE Commits lede-commits at lists.infradead.org
Tue Aug 20 15:23:17 PDT 2024


hauke pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/fd6ce0dea95272eec20eb222b08c7e685827caee

commit fd6ce0dea95272eec20eb222b08c7e685827caee
Author: Hauke Mehrtens <hauke at hauke-m.de>
AuthorDate: Sat Aug 17 14:42:50 2024 +0200

    kernel: Activate CONFIG_LIST_HARDENED
    
    Activate the kernel option CONFIG_LIST_HARDENED for all targets.
    This adds some inline checks to list_add() and list_del() operations
    in the kernel. Before kernel 6.6 these checks were only available with
    CONFIG_DEBUG_LIST option, but now a light version is available which
    should only add very few extra instructions to such operations.
    
    The performance penalty is very low from my point of view. It should
    make it much harder to use bugs in Linux kernel list handling when
    exploiting the Linux kernel.
    
    Link: https://github.com/openwrt/openwrt/pull/16189
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 target/linux/generic/config-6.6 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/target/linux/generic/config-6.6 b/target/linux/generic/config-6.6
index cce30e1097..c169e107df 100644
--- a/target/linux/generic/config-6.6
+++ b/target/linux/generic/config-6.6
@@ -3114,7 +3114,7 @@ CONFIG_LINEAR_RANGES=y
 # CONFIG_LIQUIDIO is not set
 # CONFIG_LIQUIDIO_VF is not set
 # CONFIG_LIRC is not set
-# CONFIG_LIST_HARDENED is not set
+CONFIG_LIST_HARDENED=y
 # CONFIG_LITEX_LITEETH is not set
 # CONFIG_LITEX_SOC_CONTROLLER is not set
 # CONFIG_LIVEPATCH is not set




More information about the lede-commits mailing list