[PATCH v7 00/16] Introduce secure memory zero functions
Stephen Hemminger
stephen at networkplumber.org
Sat Feb 15 20:04:28 CET 2025
This series handles memset related bugs indentified by PVS Studio.
The root cause is that Gcc and other compilers are free to
optimize away memset called before free. This is handled in
other libraries and OS's by the use of special versions of zeroing
and free.
v7 - use bzero_explicit
- add standalone tests
Stephen Hemminger (16):
eal: introduce new secure memory zero
app/test: use unit test runner for string tests
app/test: add test for rte_memzero_explicit
eal: add new secure free function
app/test: use unit test runner for malloc tests
app/test: add test for rte_free_sensitive
common/cnxk: remove unused variable
crypto/qat: force zero of keys
crypto/qat: fix size calculation for memset
crypto/qat: use secure free for keys
bus/uacce: remove memset before free
compress/octeontx: remove unnecessary memset
test: remove unneeded memset
net/ntnic: check result of malloc
net/ntnic: remove unnecessary memset
devtools/cocci: add script to find problematic memset
app/test/test_cmdline_cirbuf.c | 2 -
app/test/test_malloc.c | 183 ++++++++++--------
app/test/test_string_fns.c | 74 ++++++-
devtools/cocci/memset_free.cocci | 9 +
drivers/bus/uacce/uacce.c | 1 -
drivers/common/cnxk/roc_npc_utils.c | 4 -
drivers/compress/octeontx/otx_zip.c | 1 -
drivers/compress/octeontx/otx_zip_pmd.c | 2 -
drivers/crypto/qat/qat_asym.c | 5 +-
drivers/crypto/qat/qat_sym_session.c | 43 ++--
drivers/net/ntnic/nthw/core/nthw_hif.c | 5 +-
drivers/net/ntnic/nthw/core/nthw_iic.c | 5 +-
drivers/net/ntnic/nthw/core/nthw_pcie3.c | 5 +-
drivers/net/ntnic/nthw/core/nthw_rpf.c | 5 +-
drivers/net/ntnic/nthw/core/nthw_sdc.c | 5 +-
drivers/net/ntnic/nthw/core/nthw_si5340.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_cat.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_csu.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_flm.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_hfu.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_hsh.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_info.c | 5 +-
.../net/ntnic/nthw/flow_filter/flow_nthw_km.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_pdb.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_qsl.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_rpp_lr.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_slc_lr.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_tx_cpy.c | 1 -
.../ntnic/nthw/flow_filter/flow_nthw_tx_ins.c | 5 +-
.../ntnic/nthw/flow_filter/flow_nthw_tx_rpl.c | 5 +-
.../net/ntnic/nthw/model/nthw_fpga_model.c | 1 -
drivers/net/ntnic/nthw/nthw_rac.c | 4 +-
lib/eal/common/eal_common_string_fns.c | 15 ++
lib/eal/common/rte_malloc.c | 30 ++-
lib/eal/include/rte_malloc.h | 23 +++
lib/eal/include/rte_string_fns.h | 19 ++
lib/eal/version.map | 4 +
37 files changed, 304 insertions(+), 212 deletions(-)
create mode 100644 devtools/cocci/memset_free.cocci
--
2.47.2
More information about the dev
mailing list