From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3CCECC7618D for ; Thu, 6 Apr 2023 00:25:30 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 844506B0075; Wed, 5 Apr 2023 20:25:29 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 7F47F6B0078; Wed, 5 Apr 2023 20:25:29 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 6BBD26B007B; Wed, 5 Apr 2023 20:25:29 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0012.hostedemail.com [216.40.44.12]) by kanga.kvack.org (Postfix) with ESMTP id 5B7B76B0075 for ; Wed, 5 Apr 2023 20:25:29 -0400 (EDT) Received: from smtpin12.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id 2FC2C16050D for ; Thu, 6 Apr 2023 00:25:29 +0000 (UTC) X-FDA: 80649072378.12.2816DBD Received: from dfw.source.kernel.org (dfw.source.kernel.org [139.178.84.217]) by imf03.hostedemail.com (Postfix) with ESMTP id 6254520010 for ; Thu, 6 Apr 2023 00:25:27 +0000 (UTC) Authentication-Results: imf03.hostedemail.com; dkim=pass header.d=linux-foundation.org header.s=korg header.b=MTgSUMJI; spf=pass (imf03.hostedemail.com: domain of akpm@linux-foundation.org designates 139.178.84.217 as permitted sender) smtp.mailfrom=akpm@linux-foundation.org; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1680740727; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=pIJSteodNsDerod6ufOinfzT/oxclMBFgt2bqFsdqSw=; b=oD950g2oiiRnmRQN2KOj6lgWRkyTx5uqAelUcb2sI/FxdGnD7rvN4pfU3maUv+K+nI0HaR qnFQsQhJSBOKczIf+DIkJLQx8JInZg1APqtB6/H2PGmkT8mMrX39ktvpvPMridff7ztH65 DAn55tsQwm02ygiRhxkH5GQYI+MPMYk= ARC-Authentication-Results: i=1; imf03.hostedemail.com; dkim=pass header.d=linux-foundation.org header.s=korg header.b=MTgSUMJI; spf=pass (imf03.hostedemail.com: domain of akpm@linux-foundation.org designates 139.178.84.217 as permitted sender) smtp.mailfrom=akpm@linux-foundation.org; dmarc=none ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1680740727; a=rsa-sha256; cv=none; b=5+fW5YnBjrNzuGpjTth4AyUzAUBf97VGe2f85GnpFeJMDh1XPwZd+FeSvzruyDgawv128P oXqAw2coQj+6xv1q005a6Sz5z7kL7BtU8Fwy4SxHRXg7xDv0TNiHyEKI6yXlkYgYZJWC/b Le3pW7KyLinGvGOFueHHjBiN7G15h2E= Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id 52F7762BC4; Thu, 6 Apr 2023 00:25:26 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 6002FC433D2; Thu, 6 Apr 2023 00:25:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linux-foundation.org; s=korg; t=1680740725; bh=6c1LaWzyk6YfvJoEsJoYWLQzSo+xjO1t1nhuP2xZrV0=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=MTgSUMJIsOPgtGY0XpPKzu8KFDMJx1WeVIQEFBuJ5ed75LzSfLiDPMI/pEPLNsFo0 I8jBVJM8eyoFvkBFTP+6zaB7OswT4rW18s6ozMQoD+x3rCgzB8jR5A6gHQZgQEcZ4k ILEvgveQRI1D7ICLmvCFGNL4fURMqOjc3mV6DcBk= Date: Wed, 5 Apr 2023 17:25:24 -0700 From: Andrew Morton To: Jaewon Kim Cc: jstultz@google.com, tjmercier@google.com, sumit.semwal@linaro.org, daniel.vetter@ffwll.ch, hannes@cmpxchg.org, mhocko@kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org, jaewon31.kim@gmail.com Subject: Re: [PATCH v2] dma-buf/heaps: system_heap: Avoid DoS by limiting single allocations to half of all memory Message-Id: <20230405172524.e25b62e1c548a95564b1d324@linux-foundation.org> In-Reply-To: <20230406000854.25764-1-jaewon31.kim@samsung.com> References: <20230406000854.25764-1-jaewon31.kim@samsung.com> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.33; x86_64-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspam-User: X-Rspamd-Server: rspam03 X-Stat-Signature: zuqesfnnzqsdor6nfu9pt6jj8ucgqdps X-Rspamd-Queue-Id: 6254520010 X-HE-Tag: 1680740727-90067 X-HE-Meta: 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 vAmbTGtq TZztlw7sVBcHj/p3dNqLM05SXMggLJRgdQqiaR6Cp1pCF9MOVTzU539LGRNkSU1DAmL/AW9/KdGK8MVzLBGywugoRneKaHO0KvbipeznEfwvJLbZTGKD+q0vUV9Ypnnadi3QLOFyXsKCXB8vnnG0pX9V1xgcGlX+PFIX7/+R5gd3uYRBrB3UXNkB8Xhn/Nlh488nm+t7JZdm+9OYDpTEFSTd/krDLhaxdwp9d349MyJInqqKCVN0s2yiVAZPC1utQV2XW/kxNI9/rpFw+Pi+qPd0p+vxG5T2qyziDJGqSkfAKSfDoB2x8vqzQGeDMP3Xx1uePHgkZcGYBiTk1ur4whtiwfd8BqWrhAXYpPDXJtP5cBJAwyZO2BIjfYNtwfmWCJhagmKmz3KAc6UJ1z0zy6T1HECW9voGK8QozGuXbj7FYc/mfsKOux0dOeIZiQluLPwLIGjM2DSsNVTj+tb68atpzAnXaPrEph0I5ViDFwjywHIs= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Thu, 6 Apr 2023 09:08:54 +0900 Jaewon Kim wrote: > Normal free:212600kB min:7664kB low:57100kB high:106536kB > reserved_highatomic:4096KB active_anon:276kB inactive_anon:180kB > active_file:1200kB inactive_file:0kB unevictable:2932kB > writepending:0kB present:4109312kB managed:3689488kB mlocked:2932kB > pagetables:13600kB bounce:0kB free_pcp:0kB local_pcp:0kB > free_cma:200844kB > Out of memory and no killable processes... > Kernel panic - not syncing: System is deadlocked on memory > > An OoM panic was reported, there were only native processes which are > non-killable as OOM_SCORE_ADJ_MIN. > > After looking into the dump, I've found the dma-buf system heap was > trying to allocate a huge size. It seems to be a signed negative value. > > dma_heap_ioctl_allocate(inline) > | heap_allocation = 0xFFFFFFC02247BD38 -> ( > | len = 0xFFFFFFFFE7225100, > > Actually the old ion system heap had policy which does not allow that > huge size with commit c9e8440eca61 ("staging: ion: Fix overflow and list > bugs in system heap"). We need this change again. Single allocation > should not be bigger than half of all memory. > > ... > > --- a/drivers/dma-buf/heaps/system_heap.c > +++ b/drivers/dma-buf/heaps/system_heap.c > @@ -351,6 +351,9 @@ static struct dma_buf *system_heap_allocate(struct dma_heap *heap, > struct page *page, *tmp_page; > int i, ret = -ENOMEM; > > + if (len / PAGE_SIZE > totalram_pages() / 2) > + return ERR_PTR(-ENOMEM); > + This seems so random. Why ram/2 rather than ram/3 or 17*ram/35? Better behavior would be to try to allocate what the caller asked for and if that doesn't work out, fail gracefully after freeing the partial allocations which have been performed thus far. If dma_buf is changed to do this then that change is useful in many scenarios other than this crazy corner case.