lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 20 Nov 2013 11:00:09 +0200 From: "Michael S. Tsirkin" <mst@...hat.com> To: Michael Dalton <mwdalton@...gle.com> Cc: Eric Dumazet <eric.dumazet@...il.com>, Jason Wang <jasowang@...hat.com>, Rusty Russell <rusty@...tcorp.com.au>, lf-virt <virtualization@...ts.linux-foundation.org>, netdev@...r.kernel.org, linux-kernel@...r.kernel.org, Eric Dumazet <edumazet@...gle.com> Subject: Re: [PATCH net] virtio-net: fix page refcnt leaking when fail to allocate frag skb On Tue, Nov 19, 2013 at 05:34:16PM -0800, Michael Dalton wrote: > Hi, > > After further reflection I think we're looking at two related issues: > (a) a memory leak that Jason has identified that occurs when a memory > allocation fails in receive_mergeable. Jasons commit solves this issue. > (b) virtio-net does not dequeue all buffers for a packet in the > case that an error occurs on receive and mergeable receive buffers is > enabled. > > For (a), this bug is new and due to changes in 2613af0ed18a, and the > net impact is memory leak on the physical page. However, I believe (b) > has always been possible in some form because if page_to_skb() returns > NULL (e.g., due to SKB allocation failure), receive_mergeable is never > called. AFAICT this is also the behavior prior to 2613af0ed18a. > > The net impact of (b) would be that virtio-net would interpret a packet > buffer that is in the middle of a mergeable packet as the start of a > new packet, which is definitely also a bug (and the buffer contents > could contain bytes that resembled a valid virtio-net header). > > A solution for (b) will require handling both the page_to_skb memory > allocation failures and the memory allocation failures in > receive_mergeable introduced by 2613af0ed18a. > > Best, > > Mike Absolutely. I missed this fact yesterday night but I can see it clearly in the morning. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists