Re: [PATCH 41/43] security: kmsan: fix interoperability with auto-initialization

From: Alexander Potapenko
Date: Tue Dec 14 2021 - 12:01:22 EST


On Tue, Dec 14, 2021 at 5:38 PM Greg Kroah-Hartman
<gregkh@xxxxxxxxxxxxxxxxxxx> wrote:
>
> > @@ -124,6 +125,7 @@ choice
> > config INIT_STACK_ALL_ZERO
> > bool "zero-init everything (strongest and safest)"
> > depends on CC_HAS_AUTO_VAR_INIT_ZERO
> > + depends on !KMSAN
>
> So this means KMSAN is a developer debugging feature only and should
> never be turned on on a real device/server that has users?

100% correct. KMSAN is way slower than KASAN, it also eats 2/3 of your
memory to store the metadata.
I thought it was sort of self-evident, but I can surely mention this
explicitly in the cover letter.