[GIT PULL] hardening updates for v6.13-rc1

From: Kees Cook
Date: Thu Nov 21 2024 - 09:42:55 EST


Hi Linus,

Please pull these hardening updates for v6.13-rc1. I delayed sending
this for several days just to make sure the Kconfig and compiler.h
changes got a little more bake-time in -next since they were added to my
tree pretty late in the cycle. All seems well, so here's the PR.

Thanks!

-Kees

The following changes since commit 8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b:

Linux 6.12-rc2 (2024-10-06 15:32:27 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.13-rc1

for you to fetch changes up to f06e108a3dc53c0f5234d18de0bd224753db5019:

Compiler Attributes: disable __counted_by for clang < 19.1.3 (2024-11-19 08:48:27 -0800)

----------------------------------------------------------------
hardening updates for v6.13-rc1

- Disable __counted_by in Clang < 19.1.3 (Jan Hendrik Farr)

- string_helpers: Silence output truncation warning (Bartosz Golaszewski)

- compiler.h: Avoid needing BUILD_BUG_ON_ZERO() (Philipp Reisner)

- MAINTAINERS: Add kernel hardening keywords __counted_by{_le|_be}
(Thorsten Blum)

----------------------------------------------------------------
Bartosz Golaszewski (1):
lib: string_helpers: silence snprintf() output truncation warning

Jan Hendrik Farr (1):
Compiler Attributes: disable __counted_by for clang < 19.1.3

Philipp Reisner (1):
compiler.h: Fix undefined BUILD_BUG_ON_ZERO()

Thorsten Blum (1):
MAINTAINERS: Add kernel hardening keywords __counted_by{_le|_be}

MAINTAINERS | 2 +-
drivers/misc/lkdtm/bugs.c | 2 +-
include/linux/compiler.h | 11 +++++++++--
include/linux/compiler_attributes.h | 13 -------------
include/linux/compiler_types.h | 19 +++++++++++++++++++
init/Kconfig | 9 +++++++++
lib/overflow_kunit.c | 2 +-
lib/string_helpers.c | 2 +-
8 files changed, 41 insertions(+), 19 deletions(-)

--
Kees Cook