From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from psmtp.com (na3sys010amx182.postini.com [74.125.245.182]) by kanga.kvack.org (Postfix) with SMTP id 18A756B004D for ; Wed, 11 Jan 2012 17:12:21 -0500 (EST) Date: Wed, 11 Jan 2012 14:12:19 -0800 From: Andrew Morton Subject: Re: [PATCH] mm: Don't warn if memdup_user fails Message-Id: <20120111141219.271d3a97.akpm@linux-foundation.org> In-Reply-To: <1326300636-29233-1-git-send-email-levinsasha928@gmail.com> References: <1326300636-29233-1-git-send-email-levinsasha928@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-linux-mm@kvack.org List-ID: To: Sasha Levin Cc: lizf@cn.fujitsu.com, penberg@kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, Tyler Hicks , Dustin Kirkland , ecryptfs@vger.kernel.org On Wed, 11 Jan 2012 18:50:36 +0200 Sasha Levin wrote: > memdup_user() is called when we need to copy data from userspace. This > means that a user is able to trigger warnings if the kmalloc() inside > memdup_user() fails. > > For example, this is one caused by writing to much data to ecryptdev: > > [ 912.739685] ------------[ cut here ]------------ > [ 912.745080] WARNING: at mm/page_alloc.c:2217 __alloc_pages_nodemask+0x22c/0x910() > [ 912.746525] Pid: 19977, comm: trinity Not tainted 3.2.0-next-20120110-sasha #120 > [ 912.747915] Call Trace: > [ 912.748415] [] ? __alloc_pages_nodemask+0x22c/0x910 > [ 912.749651] [] warn_slowpath_common+0x75/0xb0 > [ 912.750756] [] warn_slowpath_null+0x15/0x20 > [ 912.751831] [] __alloc_pages_nodemask+0x22c/0x910 > [ 912.754230] [] ? pvclock_clocksource_read+0x55/0xd0 > [ 912.755484] [] ? kvm_clock_read+0x46/0x80 > [ 912.756565] [] ? sched_clock_cpu+0xc8/0x140 > [ 912.757667] [] ? get_parent_ip+0x11/0x50 > [ 912.758731] [] ? get_parent_ip+0x11/0x50 > [ 912.759890] [] ? ecryptfs_miscdev_write+0x6b/0x240 > [ 912.761119] [] alloc_pages_current+0xa0/0x110 > [ 912.762269] [] __get_free_pages+0xf/0x40 > [ 912.763347] [] __kmalloc_track_caller+0x172/0x190 > [ 912.764561] [] memdup_user+0x2b/0x90 > [ 912.765526] [] ecryptfs_miscdev_write+0x6b/0x240 > [ 912.766669] [] ? ecryptfs_miscdev_open+0x190/0x190 > [ 912.767832] [] do_loop_readv_writev+0x50/0x80 > [ 912.770735] [] do_readv_writev+0x1ce/0x1e0 > [ 912.773059] [] ? __mutex_unlock_slowpath+0x10c/0x200 > [ 912.774634] [] ? get_parent_ip+0x11/0x50 > [ 912.775699] [] ? sub_preempt_count+0x9d/0xd0 > [ 912.776827] [] ? retint_swapgs+0x13/0x1b > [ 912.777887] [] vfs_writev+0x48/0x60 > [ 912.779162] [] sys_writev+0x4f/0xb0 > [ 912.780152] [] system_call_fastpath+0x16/0x1b > [ 912.793046] ---[ end trace 50c38c9cdee53379 ]--- > [ 912.793906] ecryptfs_miscdev_write: memdup_user returned error [-12] > > Failing memdup_user() shouldn't be generating warnings, instead it should > be notifying userspace about the error. > > Signed-off-by: Sasha Levin > --- > mm/util.c | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/mm/util.c b/mm/util.c > index 136ac4f..88bb4d4 100644 > --- a/mm/util.c > +++ b/mm/util.c > @@ -91,7 +91,7 @@ void *memdup_user(const void __user *src, size_t len) > * cause pagefault, which makes it pointless to use GFP_NOFS > * or GFP_ATOMIC. > */ > - p = kmalloc_track_caller(len, GFP_KERNEL); > + p = kmalloc_track_caller(len, GFP_KERNEL | __GFP_NOWARN); > if (!p) > return ERR_PTR(-ENOMEM); There's nothing particularly special about memdup_user(): there are many ways in which userspace can trigger GFP_KERNEL allocations. The problem here (one which your patch carefully covers up) is that ecryptfs_miscdev_write() is passing an unchecked userspace-provided `count' direct into kmalloc(). This is a bit problematic for other reasons: it gives userspace a way to trigger heavy reclaim activity and perhaps even to trigger the oom-killer. A better fix here would be to validate the incoming arg before using it. Preferably by running ecryptfs_parse_packet_length() before taking a copy of the data. That would require adding a small copy_from_user() to peek at the message header. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: email@kvack.org