Skip to content

20260303-linuxkm-aarch64-fixes#9857

Open
douzzer wants to merge 7 commits intowolfSSL:masterfrom
douzzer:20260303-linuxkm-aarch64-fixes
Open

20260303-linuxkm-aarch64-fixes#9857
douzzer wants to merge 7 commits intowolfSSL:masterfrom
douzzer:20260303-linuxkm-aarch64-fixes

Conversation

@douzzer
Copy link
Contributor

@douzzer douzzer commented Mar 4, 2026

linuxkm/Kbuild:

  • for aarch64/arm64, only add -mno-outline-atomics if the compiler supports it.
  • in ENABLED_LINUXKM_PIE setup, avoid -fPIE on arm32 <5.11 (missing reloc support).

linuxkm/linuxkm_wc_port.h, linuxkm/module_hooks.c, and wolfcrypt/src/wc_port.c: gate interception of alt_cb_patch_nops() on kernel >= 6.1.

linuxkm/linuxkm_wc_port.h: define WC_LINUXKM_SUPPORT_DUMP_TO_FILE implicitly when WC_SYM_RELOC_TABLES && DEBUG_LINUXKM_PIE_SUPPORT.

linuxkm/module_hooks.c: fixes for text_dump_path and rodata_dump_path handler code.

configure.ac:

  • add --enable-wolfentropy as a synonym for --enable-wolfEntropy;
  • avoid -Wno-deprecated-enum-enum-conversion when KERNEL_MODE_DEFAULTS, to work around old gcc with broken results from AX_CHECK_COMPILE_FLAG();
  • rework help messages for several synonym options to refer to the canonical option (--enable-linuxkm-pie, --enable-kyber, --enable-dilithium, --enable-amdrand, --enable-entropy-memues).

wolfcrypt/test/test.c: add FIPS gates around "Copy cleanup test" exercises added by 4713ad5 (#9829).

tested with

wolfssl-multi-test.sh ...
check-configure
check-source-text
quantum-safe-wolfssl-all-crypto-only-intelasm-fips-dev-linuxkm-next-insmod
quantum-safe-wolfssl-all-crypto-only-intelasm-sp-asm-linuxkm-mainline-insmod
'linuxkm.*aarch64-.*'
linuxkm-defaults-all-fips-v6-clang-tidy
linuxkm-defaults-all-fips-v6-sanitizer
linuxkm-defaults-all-fips-v6-valgrind

and with a manual ARM32 linuxkm make module-with-matching-fips-hash

@douzzer douzzer added the For This Release Release version 5.9.0 label Mar 4, 2026
lealem47
lealem47 previously approved these changes Mar 4, 2026
Copy link
Contributor

@lealem47 lealem47 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @douzzer

douzzer added 5 commits March 4, 2026 13:14
* add --enable-wolfentropy as a synonym for --enable-wolfEntropy;
* avoid -Wno-deprecated-enum-enum-conversion when KERNEL_MODE_DEFAULTS, to work around old gcc with broken results from AX_CHECK_COMPILE_FLAG();
* rework help messages for several synonym options to refer to the canonical option (--enable-linuxkm-pie, --enable-kyber, --enable-dilithium, --enable-amdrand, --enable-entropy-memues).
* for aarch64/arm64, only add -mno-outline-atomics if the compiler supports it.
* in ENABLED_LINUXKM_PIE setup, avoid -fPIE on arm32 <5.11 (missing reloc support).

linuxkm/linuxkm_wc_port.h, linuxkm/module_hooks.c, and wolfcrypt/src/wc_port.c: gate interception of alt_cb_patch_nops() on kernel >= 6.1.

linuxkm/linuxkm_wc_port.h: define WC_LINUXKM_SUPPORT_DUMP_TO_FILE implicitly when WC_SYM_RELOC_TABLES && DEBUG_LINUXKM_PIE_SUPPORT.

linuxkm/module_hooks.c: fixes for text_dump_path and rodata_dump_path handler code.
* skip pkcs12_test() if NO_SHA;
* sha3_224_test(): fix error-path leak and possible uninited-read of shaCopy.
@douzzer douzzer force-pushed the 20260303-linuxkm-aarch64-fixes branch from ca423ba to 1297a85 Compare March 4, 2026 19:14
@douzzer
Copy link
Contributor Author

douzzer commented Mar 5, 2026

retest this please

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

For This Release Release version 5.9.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants