linux-kernel - Re: [PATCH 4/4] mm/memofy-failure.c: add hwpoison

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20220506085945.GD1356094@u2004>
Date:   Fri, 6 May 2022 17:59:45 +0900
From:   Naoya Horiguchi <naoya.horiguchi@...ux.dev>
To:     zhenwei pi <pizhenwei@...edance.com>
Cc:     akpm@...ux-foundation.org, naoya.horiguchi@....com,
        linux-mm@...ck.org, linux-kernel@...r.kernel.org,
        Wu Fengguang <fengguang.wu@...el.com>
Subject: Re: [PATCH 4/4] mm/memofy-failure.c: add hwpoison_filter for soft
 offline

On Fri, Apr 29, 2022 at 10:22:06PM +0800, zhenwei pi wrote:
> hwpoison_filter is missing in the soft offline path, this leads an
> issue: after enabling the corrupt filter, the user process still has
> a chance to inject hwpoison fault by
> madvise(addr, len, MADV_SOFT_OFFLINE) at PFN which is expected to
> reject.

The motivation is fine to me. Thank you for finding this.

> 
> Cc: Wu Fengguang <fengguang.wu@...el.com>
> Signed-off-by: zhenwei pi <pizhenwei@...edance.com>
> ---
>  mm/memory-failure.c | 9 ++++++++-
>  1 file changed, 8 insertions(+), 1 deletion(-)
> 
> diff --git a/mm/memory-failure.c b/mm/memory-failure.c
> index a6a27c8b800f..6564f5a34658 100644
> --- a/mm/memory-failure.c
> +++ b/mm/memory-failure.c
> @@ -2313,7 +2313,9 @@ static void put_ref_page(struct page *page)
>   * @pfn: pfn to soft-offline
>   * @flags: flags. Same as memory_failure().
>   *
> - * Returns 0 on success, otherwise negated errno.
> + * Returns 0 on success
> + *         -EOPNOTSUPP for memory_filter() filtered the error event

Using word hwpoison_filter() rather than memory_filter() seems better to me.

> + *         < 0 otherwise negated errno.
>   *
>   * Soft offline a page, by migration or invalidation,
>   * without killing anything. This is for the case when
> @@ -2350,6 +2352,11 @@ int soft_offline_page(unsigned long pfn, int flags)
>  		return -EIO;
>  	}
>  
> +	if (hwpoison_filter(page)) {
> +		put_ref_page(ref_page);
> +		return -EOPNOTSUPP;
> +	}
> +

Based on the assumption behind hwpoison_filter(), calling it after
get_hwpoison_page() would be better?

Thanks,
Naoya Horiguchi