From: catalin.marinas@arm.com (Catalin Marinas)
To: linux-arm-kernel@lists.infradead.org
Subject: [PATCH] lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
Date: Tue, 29 Oct 2013 10:51:59 +0000 [thread overview]
Message-ID: <20131029105159.GB3472@arm.com> (raw)
In-Reply-To: <1382977205-26268-1-git-send-email-ming.lei@canonical.com>
On Mon, Oct 28, 2013 at 04:20:05PM +0000, Ming Lei wrote:
> Commit b1adaf65ba03([SCSI] block: add sg buffer copy helper functions)
> introduces two sg buffer copy helpers, and calls flush_kernel_dcache_page()
> on pages in SG list after these pages are written to.
>
> Unfortunately, the commit may introduce a potential bug:
>
> - Before sending some SCSI commands, kmalloc() buffer may be
> passed to block layper, so flush_kernel_dcache_page() can
> see a slab page finally
>
> - According to cachetlb.txt, flush_kernel_dcache_page() is
> only called on "a user page", which surely can't be a slab page.
>
> - ARCH's implementation of flush_kernel_dcache_page() may
> use page mapping information to do optimization so page_mapping()
> will see the slab page, then VM_BUG_ON() is triggered.
>
> Aaro Koskinen reported the bug on ARM/kirkwood when DEBUG_VM is enabled,
> and this patch fixes the bug by adding test of '!PageSlab(miter->page)'
> before calling flush_kernel_dcache_page().
>
> Reported-by: Aaro Koskinen <aaro.koskinen@iki.fi>
> Cc: Russell King - ARM Linux <linux@arm.linux.org.uk>
> Cc: linux-arm-kernel at lists.infradead.org
> Cc: Simon Baatz <gmbnomis@gmail.com>
> Cc: Will Deacon <will.deacon@arm.com>
> Cc: Aaro Koskinen <aaro.koskinen@iki.fi>
> Cc: Catalin Marinas <catalin.marinas@arm.com>
> Cc: Andrew Morton <akpm@linux-foundation.org>
> Cc: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
> Cc: Tejun Heo <tj@kernel.org>
> Cc: "James E.J. Bottomley" <JBottomley@parallels.com>
> Cc: Jens Axboe <axboe@kernel.dk>
> Signed-off-by: Ming Lei <ming.lei@canonical.com>
Acked-by: Catalin Marinas <catalin.marinas@arm.com>
WARNING: multiple messages have this Message-ID (diff)
From: Catalin Marinas <catalin.marinas@arm.com>
To: Ming Lei <ming.lei@canonical.com>
Cc: "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
Andrew Morton <akpm@linux-foundation.org>,
Russell King - ARM Linux <linux@arm.linux.org.uk>,
"linux-arm-kernel@lists.infradead.org"
<linux-arm-kernel@lists.infradead.org>,
Simon Baatz <gmbnomis@gmail.com>,
Will Deacon <Will.Deacon@arm.com>,
Aaro Koskinen <aaro.koskinen@iki.fi>,
FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>,
Tejun Heo <tj@kernel.org>,
"James E.J. Bottomley" <JBottomley@parallels.com>,
Jens Axboe <axboe@kernel.dk>
Subject: Re: [PATCH] lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
Date: Tue, 29 Oct 2013 10:51:59 +0000 [thread overview]
Message-ID: <20131029105159.GB3472@arm.com> (raw)
In-Reply-To: <1382977205-26268-1-git-send-email-ming.lei@canonical.com>
On Mon, Oct 28, 2013 at 04:20:05PM +0000, Ming Lei wrote:
> Commit b1adaf65ba03([SCSI] block: add sg buffer copy helper functions)
> introduces two sg buffer copy helpers, and calls flush_kernel_dcache_page()
> on pages in SG list after these pages are written to.
>
> Unfortunately, the commit may introduce a potential bug:
>
> - Before sending some SCSI commands, kmalloc() buffer may be
> passed to block layper, so flush_kernel_dcache_page() can
> see a slab page finally
>
> - According to cachetlb.txt, flush_kernel_dcache_page() is
> only called on "a user page", which surely can't be a slab page.
>
> - ARCH's implementation of flush_kernel_dcache_page() may
> use page mapping information to do optimization so page_mapping()
> will see the slab page, then VM_BUG_ON() is triggered.
>
> Aaro Koskinen reported the bug on ARM/kirkwood when DEBUG_VM is enabled,
> and this patch fixes the bug by adding test of '!PageSlab(miter->page)'
> before calling flush_kernel_dcache_page().
>
> Reported-by: Aaro Koskinen <aaro.koskinen@iki.fi>
> Cc: Russell King - ARM Linux <linux@arm.linux.org.uk>
> Cc: linux-arm-kernel@lists.infradead.org
> Cc: Simon Baatz <gmbnomis@gmail.com>
> Cc: Will Deacon <will.deacon@arm.com>
> Cc: Aaro Koskinen <aaro.koskinen@iki.fi>
> Cc: Catalin Marinas <catalin.marinas@arm.com>
> Cc: Andrew Morton <akpm@linux-foundation.org>
> Cc: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
> Cc: Tejun Heo <tj@kernel.org>
> Cc: "James E.J. Bottomley" <JBottomley@parallels.com>
> Cc: Jens Axboe <axboe@kernel.dk>
> Signed-off-by: Ming Lei <ming.lei@canonical.com>
Acked-by: Catalin Marinas <catalin.marinas@arm.com>
next prev parent reply other threads:[~2013-10-29 10:51 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-10-28 16:20 [PATCH] lib/scatterlist.c: don't flush_kernel_dcache_page on slab page Ming Lei
2013-10-28 16:20 ` Ming Lei
2013-10-29 10:51 ` Catalin Marinas [this message]
2013-10-29 10:51 ` Catalin Marinas
2013-10-29 12:57 ` Simon Baatz
2013-10-29 12:57 ` Simon Baatz
2013-10-31 22:27 ` Andrew Morton
2013-10-31 22:27 ` Andrew Morton
2013-10-31 22:44 ` Russell King - ARM Linux
2013-10-31 22:44 ` Russell King - ARM Linux
2013-10-31 22:49 ` Aaro Koskinen
2013-10-31 22:49 ` Aaro Koskinen
2013-10-31 22:54 ` Andrew Morton
2013-10-31 22:54 ` Andrew Morton
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20131029105159.GB3472@arm.com \
--to=catalin.marinas@arm.com \
--cc=linux-arm-kernel@lists.infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.