linux-kernel - [PATCH 0/2] mm, thp: fix file-backed THP race in collapse

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20210906121200.57905-1-rongwei.wang@linux.alibaba.com>
Date:   Mon,  6 Sep 2021 20:11:58 +0800
From:   Rongwei Wang <rongwei.wang@...ux.alibaba.com>
To:     linux-mm@...ck.org, linux-kernel@...r.kernel.org
Cc:     akpm@...ux-foundation.org, cfijalkovich@...gle.com,
        song@...nel.org, william.kucharski@...cle.com, hughd@...gle.com
Subject: [PATCH 0/2] mm, thp: fix file-backed THP race in collapse_file

Hi,
We found two bugs related to file-backed THP in our cases, recently.
The two bugs rough description as following:

1) in truncate_inode_pages_range, subpage(s) of file-backed THP can be
revealed by find_get_entry.

2) 'collapse_file' miss the pages which in writeback but no private.
This situation will be triggered in XFS when block size is set to
PAGESIZE.

These two patchs mainly fix the above mentioned bugs, and have been
tested in latest branch.

Rongwei Wang (2):
  mm, thp: check page mapping when truncating page cache
  mm, thp: bail out early in collapse_file for writeback page

 mm/filemap.c    |  7 ++++++-
 mm/khugepaged.c |  3 ++-
 mm/truncate.c   | 17 ++++++++++++++++-
 3 files changed, 24 insertions(+), 3 deletions(-)

-- 
1.8.3.1