From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-16.6 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 06C9AC433DB for ; Thu, 4 Mar 2021 15:06:08 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 8EE5C64F68 for ; Thu, 4 Mar 2021 15:06:07 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 8EE5C64F68 Authentication-Results: mail.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=suse.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 487756B000D; Thu, 4 Mar 2021 10:06:01 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 239EB6B000C; Thu, 4 Mar 2021 10:06:01 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id D82226B000E; Thu, 4 Mar 2021 10:06:00 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0223.hostedemail.com [216.40.44.223]) by kanga.kvack.org (Postfix) with ESMTP id BE31A6B000C for ; Thu, 4 Mar 2021 10:06:00 -0500 (EST) Received: from smtpin04.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay04.hostedemail.com (Postfix) with ESMTP id 6BD961EFD for ; Thu, 4 Mar 2021 15:06:00 +0000 (UTC) X-FDA: 77882516880.04.B124706 Received: from mx2.suse.de (mx2.suse.de [195.135.220.15]) by imf13.hostedemail.com (Postfix) with ESMTP id 10869E0011E2 for ; Thu, 4 Mar 2021 15:05:57 +0000 (UTC) X-Virus-Scanned: by amavisd-new at test-mx.suse.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=susede1; t=1614870357; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IelbdHFdsyOkbu2alG35onEPhuBF6w4DkG7+lHkRi8s=; b=Hjs/U3D7mzGUeaK/ChDXtO9SUH74RxkGkj5ExjRXm91WbB573QCb4aJ0y33bzvfdb72hGn RAvp9cNbbUB39VqyUbl3oaDc2+yFL8JypU6/iH30XUPsbIoI0eb1VEYGMo3DnArwLIVApb 7Wn1Z6+YdsGFPrqI4OtGriS802ddgik= Received: from relay2.suse.de (unknown [195.135.221.27]) by mx2.suse.de (Postfix) with ESMTP id 3B8EDAC1F; Thu, 4 Mar 2021 15:05:57 +0000 (UTC) From: Anthony Iliopoulos To: Greg Kroah-Hartman , Jens Axboe , Andrew Morton , Matthew Wilcox Cc: stable@vger.kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org Subject: [PATCH STABLE 4.14 4.19] swap: fix swapfile page to sector mapping Date: Thu, 4 Mar 2021 16:08:21 +0100 Message-Id: <20210304150824.29878-2-ailiop@suse.com> X-Mailer: git-send-email 2.30.1 In-Reply-To: <20210304150824.29878-1-ailiop@suse.com> References: <20210304150824.29878-1-ailiop@suse.com> MIME-Version: 1.0 X-Stat-Signature: rnddecxcqqe79k64it4jm5mbot5s7czj X-Rspamd-Server: rspam05 X-Rspamd-Queue-Id: 10869E0011E2 Received-SPF: none (suse.com>: No applicable sender policy available) receiver=imf13; identity=mailfrom; envelope-from=""; helo=mx2.suse.de; client-ip=195.135.220.15 X-HE-DKIM-Result: pass/pass X-HE-Tag: 1614870357-276187 Content-Transfer-Encoding: quoted-printable X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: commit caf6912f3f4af7232340d500a4a2008f81b93f14 upstream. Fix block device sector offset calculation for swap page io on top of blockdevs that provide a rw_page operation and do page-sized io directly (without the block layer). Currently swap_page_sector() maps a swap page into a blockdev sector by obtaining the swap page offset (swap map slot), but ignores the swapfile starting offset into the blockdev. In setups where swapfiles are sitting on top of a filesystem, this results into swapping out activity potentially overwriting filesystem blocks that fall outside the swapfile region. [This issue only affects swapfiles on filesystems on top of blockdevs that implement rw_page ops (brd, zram, btt, pmem), and not on top of any other block devices, in contrast to the upstream commit fix.] Fixes: dd6bd0d9c7db ("swap: use bdev_read_page() / bdev_write_page()") Cc: stable@vger.kernel.org # 4.14 4.19 Signed-off-by: Anthony Iliopoulos --- mm/page_io.c | 11 +++-------- mm/swapfile.c | 2 +- 2 files changed, 4 insertions(+), 9 deletions(-) diff --git a/mm/page_io.c b/mm/page_io.c index 08d2eae58fce..9b646f07f47f 100644 --- a/mm/page_io.c +++ b/mm/page_io.c @@ -38,7 +38,6 @@ static struct bio *get_swap_bio(gfp_t gfp_flags, =20 bio->bi_iter.bi_sector =3D map_swap_page(page, &bdev); bio_set_dev(bio, bdev); - bio->bi_iter.bi_sector <<=3D PAGE_SHIFT - 9; bio->bi_end_io =3D end_io; =20 for (i =3D 0; i < nr; i++) @@ -262,11 +261,6 @@ int swap_writepage(struct page *page, struct writeba= ck_control *wbc) return ret; } =20 -static sector_t swap_page_sector(struct page *page) -{ - return (sector_t)__page_file_index(page) << (PAGE_SHIFT - 9); -} - static inline void count_swpout_vm_event(struct page *page) { #ifdef CONFIG_TRANSPARENT_HUGEPAGE @@ -325,7 +319,8 @@ int __swap_writepage(struct page *page, struct writeb= ack_control *wbc, return ret; } =20 - ret =3D bdev_write_page(sis->bdev, swap_page_sector(page), page, wbc); + ret =3D bdev_write_page(sis->bdev, map_swap_page(page, &sis->bdev), + page, wbc); if (!ret) { count_swpout_vm_event(page); return 0; @@ -376,7 +371,7 @@ int swap_readpage(struct page *page, bool synchronous= ) return ret; } =20 - ret =3D bdev_read_page(sis->bdev, swap_page_sector(page), page); + ret =3D bdev_read_page(sis->bdev, map_swap_page(page, &sis->bdev), page= ); if (!ret) { if (trylock_page(page)) { swap_slot_free_notify(page); diff --git a/mm/swapfile.c b/mm/swapfile.c index 130e2e41a48c..057e6907bf7b 100644 --- a/mm/swapfile.c +++ b/mm/swapfile.c @@ -2305,7 +2305,7 @@ sector_t map_swap_page(struct page *page, struct bl= ock_device **bdev) { swp_entry_t entry; entry.val =3D page_private(page); - return map_swap_entry(entry, bdev); + return map_swap_entry(entry, bdev) << (PAGE_SHIFT - 9); } =20 /* --=20 2.30.1