20251017-linuxkm-signal-handling-tweaks

[douzzer]

linuxkm/linuxkm_wc_port.h, wolfssl/wolfcrypt/types.h, linuxkm/module_hooks.c, linuxkm/lkcapi_glue.c:

• add WC_SIG_IGNORE_BEGIN(), WC_SIG_IGNORE_END(), wc_linuxkm_sig_ignore_begin(), wc_linuxkm_sig_ignore_end();
• move WC_CHECK_FOR_INTR_SIGNALS() and WC_RELAX_LONG_LOOP() definitions outside the BUILDING_WOLFSSL gate;
• tweak gating for verifyCore and my_kallsyms_lookup_name, and use the latter to reach verifyCore on old FIPS;
• tweak the "In-core integrity hash check failure." message to supply module-update-fips-hash instructions;
• refactor linuxkm_lkcapi_registering_now as a wolfSSL_Atomic_Int and use it as a mutex for linuxkm_lkcapi_register() and linuxkm_lkcapi_unregister();
• add WC_SIG_IGNORE_BEGIN()...WC_SIG_IGNORE_END() wrappers around all relevant critical spans in linuxkm glue.

.github/workflows/linuxkm.yml: comment out --enable-linuxkm-pie config, pending resolution of "dwarf_get_units failed" on Azure kernel 6.14 image.

tested with wolfssl-multi-test.sh ... '.*insmod.*' with multi-test fixed to recognize the new kernel hash check failure message.

[devin-ai-integration]

🛟 Devin Lifeguard found 2 likely issues in this PR

• check-all-return-codes snippet snippet snippet snippet snippet: Capture the return value of WC_SIG_IGNORE_BEGIN/END (e.g. int nesting = WC_SIG_IGNORE_BEGIN(); ) and, if needed, validate or at least explicitly cast to void to indicate intentional discard, satisfying the rule.
• check-all-return-codes snippet snippet snippet: Capture the integer returned by WC_SIG_IGNORE_BEGIN/END (e.g., int ignore_cnt = WC_SIG_IGNORE_BEGIN();) and verify it or explicitly cast to (void) with a comment explaining why the value can be ignored.

@douzzer
please take a look at the above issues which Devin flagged. Devin will not fix these issues automatically.

[douzzer]

Devin Lifeguard found 2 likely issues in this PR

• check-all-return-codes snippet snippet snippet snippet snippet: Capture the return value of WC_SIG_IGNORE_BEGIN/END

Addressed. _BEGIN() is now checked, and _END() is explicitly (void)ed.

[douzzer]

retest this please

missing workspace /var/lib/jenkins/workspace/wolfSSL/PRB-140-3-tests on boz-xeon1
[...]
/var/lib/jenkins/workspace/wolfSSL/PRB-140-3-tests@tmp/durable-3010428d/script.sh.copy: 1: cd: can't cd to wolfssl-fips

[douzzer]

retest this please

FAIL scripts/openssl.test (exit status: 1)

[philljj]

Thanks for fixing the dwarf issue!

[douzzer]

Thanks for fixing the dwarf issue!