linux-kernel - Re: 4.9.0 regression in pipe-backed iov

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20170113112528.GM1555@ZenIV.linux.org.uk>
Date:   Fri, 13 Jan 2017 11:25:29 +0000
From:   Al Viro <viro@...IV.linux.org.uk>
To:     "Alan J. Wylie" <alan@...ie.me.uk>
Cc:     Linus Torvalds <torvalds@...ux-foundation.org>,
        Thorsten Leemhuis <regressions@...mhuis.info>,
        linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: 4.9.0 regression in pipe-backed iov_iter with systemd-nspawn

On Fri, Jan 13, 2017 at 10:32:47AM +0000, Alan J. Wylie wrote:
> # dmesg  | tail
> ...
> [  141.553455] nr: 0->16, cur: 5->5, buffers: 16->16
> [  141.553461] copied: 0, count:2147479552, idx:5, offs:0

OK, that looks like pipe_advance() fencepost (hopefully) dealt with in
the lib/iov_iter.c patch I've just posted.  I'm going down right now, but
if you have a box you are not too fond of, it would be nice if you tried
that one.  Warning: the patch had been written in a barely awake state, and
is completely untested.  Treat accordingly...