commit ed18adc1cdd00a5c55a20fbdaed4804660772281
author Kees Cook <keescook@chromium.org> Thu Jun 23 15:24:05 2016 -0700
committer Kees Cook <keescook@chromium.org> Tue Jul 26 14:43:54 2016 -0700
tree 652ad77b2d5e9ed24eb4782c2b270c7e7b4fc0c1
parent 04385fc5e8fffed84425d909a783c0f0c587d847

mm: SLUB hardened usercopy support

Under CONFIG_HARDENED_USERCOPY, this adds object size checking to the
SLUB allocator to catch any copies that may span objects. Includes a
redzone handling fix discovered by Michael Ellerman.

Based on code from PaX and grsecurity.

Signed-off-by: Kees Cook <keescook@chromium.org>
Tested-by: Michael Ellerman <mpe@ellerman.id.au>
Reviwed-by: Laura Abbott <labbott@redhat.com>

init/Kconfig

diff --git a/init/Kconfig b/init/Kconfig
index 1312d7b..0c84706 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -1766,6 +1766,7 @@
 
 config SLUB
 	bool "SLUB (Unqueued Allocator)"
+	select HAVE_HARDENED_USERCOPY_ALLOCATOR
 	help
 	   SLUB is a slab allocator that minimizes cache line usage
 	   instead of managing queues of cached objects (SLAB approach).