linux-kernel - [PATCH 0/5] fs genetic refcounter conversions

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1488364937-12486-1-git-send-email-elena.reshetova@intel.com>
Date:   Wed,  1 Mar 2017 12:42:12 +0200
From:   Elena Reshetova <elena.reshetova@...el.com>
To:     linux-kernel@...r.kernel.org
Cc:     linux-fsdevel@...r.kernel.org, peterz@...radead.org,
        gregkh@...uxfoundation.org, viro@...iv.linux.org.uk,
        jlayton@...chiereds.net, bfields@...ldses.org,
        ebiederm@...ssion.com, john.hammond@...el.com,
        Elena Reshetova <elena.reshetova@...el.com>
Subject: [PATCH 0/5] fs genetic refcounter conversions

Now when new refcount_t type and API are finally merged
(see include/linux/refcount.h), the following
patches convert various refcounters in the generic fs code from atomic_t
to refcount_t. By doing this we prevent intentional or accidental
underflows or overflows that can led to use-after-free vulnerabilities.

The below patches are fully independent and can be cherry-picked separately.
Since we convert all kernel subsystems in the same fashion, resulting
in about 300 patches, we have to group them for sending at least in some
fashion to be manageable. Please excuse the long cc list.

Run-time tested using xfstests with xfs and ext4 filesystems.
refcount WARNs were on and no issues related to changes were encounted
during running the tests.

Elena Reshetova (5):
  fs: convert mb_cache_entry.e_refcnt from atomic_t to refcount_t
  fs: convert posix_acl.a_refcount from atomic_t to refcount_t
  fs: convert mnt_namespace.count from atomic_t to refcount_t
  fs: convert super_block.s_active from atomic_t to refcount_t
  fs: convert userfaultfd_ctx.refcount from atomic_t to refcount_t

 drivers/staging/lustre/lustre/llite/llite_lib.c |  2 +-
 fs/cifs/cifsfs.c                                |  2 +-
 fs/devpts/inode.c                               |  2 +-
 fs/f2fs/acl.c                                   |  2 +-
 fs/gfs2/super.c                                 |  2 +-
 fs/kernfs/mount.c                               |  2 +-
 fs/mbcache.c                                    | 16 ++++++++--------
 fs/mount.h                                      |  5 +++--
 fs/namespace.c                                  |  8 ++++----
 fs/nfs/super.c                                  |  4 ++--
 fs/posix_acl.c                                  |  6 +++---
 fs/super.c                                      | 10 +++++-----
 fs/userfaultfd.c                                | 11 ++++++-----
 include/linux/fs.h                              |  3 ++-
 include/linux/mbcache.h                         |  6 +++---
 include/linux/posix_acl.h                       |  7 ++++---
 16 files changed, 46 insertions(+), 42 deletions(-)

-- 
2.7.4