linux/kernel/configs
Nathan Chancellor 7fcb91d94e configs/hardening: Disable CONFIG_UBSAN_SIGNED_WRAP
kernel/configs/hardening.config turns on UBSAN for the bounds sanitizer,
as that in combination with trapping can stop the exploitation of buffer
overflows within the kernel. At the same time, hardening.config turns
off every other UBSAN sanitizer because trapping means all UBSAN reports
will be fatal and the problems brought up by other sanitizers generally
do not have security implications.

The signed integer overflow sanitizer was recently added back to the
kernel and it is default on with just CONFIG_UBSAN=y, meaning that it
gets enabled when merging hardening.config into another configuration.
While this sanitizer does have security implications like the array
bounds sanitizer, work to clean up enough instances to allow this to run
in production environments is still ramping up, which means regular
users and testers may be broken by these instances with
CONFIG_UBSAN_TRAP=y. Disable CONFIG_UBSAN_SIGNED_WRAP in
hardening.config to avoid this situation.

Fixes: 557f8c582a ("ubsan: Reintroduce signed overflow sanitizer")
Signed-off-by: Nathan Chancellor <nathan@kernel.org>
Link: https://lore.kernel.org/r/20240411-fix-ubsan-in-hardening-config-v1-2-e0177c80ffaa@kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
2024-04-15 11:08:24 -07:00
..
debug.config configs/debug: add NET debug config 2024-02-15 17:46:53 -08:00
hardening.config configs/hardening: Disable CONFIG_UBSAN_SIGNED_WRAP 2024-04-15 11:08:24 -07:00
kvm_guest.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
nopm.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
rust.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
tiny-base.config treewide: drop CONFIG_EMBEDDED 2023-08-21 13:46:25 -07:00
tiny.config mm/slab: rename CONFIG_SLAB to CONFIG_SLAB_DEPRECATED 2023-05-26 19:01:47 +02:00
x86_debug.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00
xen.config kbuild: Show marked Kconfig fragments in "help" 2023-09-04 02:04:20 +09:00