User: Password:
Subscribe / Log in / New account

An introduction to creating GCC plugins

An introduction to creating GCC plugins

Posted Sep 29, 2011 21:58 UTC (Thu) by PaXTeam (guest, #24616)
Parent article: An introduction to creating GCC plugins

if anyone's interested in what gcc plugins can do in a kernel context, check out the few distributed in PaX (under tools/gcc). some examples: automatic ops structure constification, user/kernel function pointer separation, *alloc size statistics, etc.

(Log in to post comments)

An introduction to creating GCC plugins

Posted Sep 30, 2011 13:38 UTC (Fri) by vonbrand (guest, #4458) [Link]

I'd vote for a way to point out such oportunities to hackers, or even write source patches. Some magic mangling that gives object code that doesn't behave as the source says is deeply disturbing to my little mind.

An introduction to creating GCC plugins

Posted Sep 30, 2011 21:10 UTC (Fri) by PaXTeam (guest, #24616) [Link]

i assume you're compiling all your code with -O0 then lest you fall victim of the infamous NULL check elimination as the kernel itself did not long ago, not to mention SSP that must be your enemy #1 then ;). more seriously, and assuming you're talking about the constification plugin, the truth is that the patch route was tried before and it just doesn't scale at both the producer (patch writer) and the consumer (lkml/kernel devs) side.

to give you some numbers, an allmodconfig 2.6.39 i386 kernel loses over 7000 static (i.e., not runtime allocated) writable function pointers (a reduction of about 16%). creating an equivalent source patch would be thousands of lines of code and have virtually no chance to be accepted in any reasonable amount of time (not to mention the maintenance effort of being out-of-tree during the process; i've carried a small fraction of such a patch in PaX for years and it was a PITA even if the patch itself was 'only' 800k).

also by virtue of enforcing const on these types one will quickly find out all the places where variables of a given type are modified (sometimes in direct contradiction to kernel policy) and one will be forced to document it in the code (for each such exception there's a writable type to be used, based on the no_const attribute introduced by the plugin). the patch for this is about 100k, but it also includes changes that actually eliminate the need to modify a given variable (vs. just changing its type to be writable).

all in all, the cost/benefit ratio of the plugin approach is excellent and there's a lot more in the pipeline ;).

An introduction to creating GCC plugins

Posted Oct 4, 2011 8:44 UTC (Tue) by MattDavis (guest, #79566) [Link]

Thanks for the tip!

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds