Re: [Intel-gfx] [PATCH v12 2/3] drm/i915: add syncobj timeline support

From: Kees Cook
Date: Wed Jul 29 2020 - 15:19:40 EST


On Wed, Jul 29, 2020 at 10:51:23AM -0700, Linus Torvalds wrote:
> On Wed, Jul 29, 2020 at 5:24 AM Daniel Vetter <daniel@xxxxxxxx> wrote:
> >
> > Do we have a access_ok_array or so? Instead of duplicating overflow checks
> > everywhere and getting it all wrong ...
>
> I really really think you should get away from access_ok() entirely.
>
> Please just get rid of it, and use "copy_from_user()" instead.

Yes please. :) It also makes code SO much easier to audit (both
automatically and manually).

--
Kees Cook