I presented at the Open Source Summit Korea in Seoul this morning. 🇰🇷🐧🛡⚔️ Upstream Kernel Hardening: Recent Progress and Challenges With the release of Linux 7.0, Rust is no longer considered experimental. New and safer components are expected to be written in Rust in the near future. However, the Linux kernel still contains more than...
10 years ago today, I completed the LFD420 training by The Linux Foundation. About a year later, I became a professional Linux kernel developer. 🐧👨🏽‍💻 I think back then it was about half the price it is today, and I spent basically all my savings to pay for it. I didn t know it at the...
16 years ago today, after watching a presentation on YouTube titled Write and Submit your first Linux Kernel Patch by Greg Kroah-Hartman, I submitted my first patch to the Linux kernel. 🐧🙂 I didn t really have much idea of what I was doing, and after submitting a few more similar patches that same year (2010),...
The warning During one of my presentations at Open Source Summit Japan 🇯🇵 the past year, I talked about a bug I found while addressing -Wflex-array-member-not-at-end issues in the Linux kernel. The warning reported by the compiler was the following. See the related code below. According to the compiler, struct virtio_net_rss_config_trailer at line 429 above...
Today I woke up to the great news that we now have only 100 -Wflex-array-member-not-at-end issues left to be addressed in linux-next. I started fixing these issues a couple of years ago after running into a memory corruption bug caused by a flexible-array member in the middle of a structure. I discovered this bug while...
While reviewing one of the patches sent to the linux-hardening list this afternoon, I spotted a bug I introduced in the same code two years ago (on March 5 2024, to be precise). Over nearly a decade contributing to the Linux kernel, I ve discovered and fixed many years-old bugs, and it s always a special feeling....
I talked for more than two hours (135 mins to be precise) about upstream Linux kernel hardening at Okayama University this afternoon. 🐧👨🏽‍💻🎙 I just uploaded my slides here: https://embeddedor.com/blog/presentations/#Enhancing_spatial_safety_Better_array-bounds_checking_in_C_and_Linux_Okayama_University_%E2%80%93Guest_talk I really enjoyed the session.…
First kernel patch of 2026 addressing 2,600 -Wflex-array-member-not-at-end warnings at once: ▫️ [PATCH v2][next] ipv4/inet_sock.h: Avoid thousands of -Wflex-array-member-not-at-end warnings It has been taken into the net-next tree and it’s now in linux-next. 🙌🏼 ▫️…
I had a great time at Open Source Summit and Linux Plumbers Conference in Japan last December. 🇯🇵🐧 Here are the links to my two presentations about upstream Linux kernel hardening: ▫️ Enhancing spatial safety: Better array-bounds checking in C (and Linux) ▫️ Upstream Kernel Hardening: Progress on enabling -Wflex-array-member-not-at-end I hope…
I received the following request this evening and it absolutely made my day. 🙂 I m a mechatronics student and I discovered the project from this block post: https://embeddedor.com/blog/2024/09/28/one-simple-and-rewarding-way-to-contribute-to-the-linux-kernel-fix-coverity-issues/ and as such I m instersted in contributing as well. More than a year ago, I wrote a blog post to guide people to…