> On Jun 27, 2025, at 15:24, Kees Cook <k...@kernel.org> wrote:
> 
> On Fri, Jun 27, 2025 at 01:38:51PM +0000, Qing Zhao wrote:
>> The good news is:  With the above simple heuristic and a simple back tracing 
>> of  the CFG, all the 
>> current testing cases for the following PRs passed without any issue:  
>> 
>> PR109071
>> PR88771
>> PR85788
>> PR108770
>> PR106762
>> PR115274
>> PR117179
>> 
>> I will continue working on this to add more testing cases and also more 
>> warnings per the following discussion:
>> https://gcc.gnu.org/pipermail/gcc-patches/2025-May/684126.html
>> https://gcc.gnu.org/pipermail/gcc-patches/2025-June/686323.html
>> https://gcc.gnu.org/pipermail/gcc-patches/2025-June/685852.html
>> https://gcc.gnu.org/pipermail/gcc-patches/2025-June/685854.html
>> 
>> Let me know if you have any comments or suggestions.
> 
> Thanks great!
> 
> Here are the patches I got landed in Linux that were uncovered using the
> earlier -fdiagnostics-details implementation:
> 
> https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/?qt=grep&q=diagnostics-details
> 
> Reverting these patches show the warnings again for me. If you want to
> test them against the new implementation, this should work:
> 
> ### Set up build...
> 
> $ git clone git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
> $ cd linux
> $ git revert --no-edit 8a39f1c870e9d6fbac5638f3a42a6a6363829c49
> $ git revert --no-edit 4a6f18f28627e121bd1f74b5fcc9f945d6dbeb1e
> $ git revert --no-edit 239d87327dcd361b0098038995f8908f3296864f
> $ git revert --no-edit ac6f0825e582f2216a582c9edf0cee7bfe347ba6
> $ CPUS=$(getconf _NPROCESSORS_ONLN)
> $ FLAGS="-Warray-bounds -fdiagnostic-show-context=1"
> $ make -j$CPUS KCFLAGS="$FLAGS" allmodconfig
> 
> # These three targets are stable, the 4th one is harder to hit, so
> # I've left it off (kernel/padata.o):
> 
> $ make -j$CPUS KCFLAGS="$FLAGS" fs/overlayfs/util.o
> $ make -j$CPUS KCFLAGS="$FLAGS" drivers/net/ethernet/mellanox/mlx4/alloc.o
> $ make -j$CPUS KCFLAGS="$FLAGS" drivers/pinctrl/mediatek/pinctrl-airoha.o

Thanks, I will try this with the new implementation on my side first.
> 
> 
> If you prefer, I can also do this once the new implementation is posted. :)

If there is any issue during my testing, I will let you know at that time.

Thanks a lot.

Qing
> 
> -Kees
> 
> -- 
> Kees Cook

Reply via email to