All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
To: Leon Romanovsky <leon@leon.nu>
Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>,
	Andrew Morton <akpm@linux-foundation.org>,
	Oleg Nesterov <oleg@redhat.com>, Linux-MM <linux-mm@kvack.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	Dave Hansen <dave.hansen@linux.intel.com>,
	Andy Lutomirski <luto@amacapital.net>,
	Thomas Gleixner <tglx@linutronix.de>
Subject: Re: [PATCH 2/5] x86, mpx: do not set ->vm_ops on mpx VMAs
Date: Mon, 13 Jul 2015 15:29:20 +0300 (EEST)	[thread overview]
Message-ID: <20150713122920.32C8CA4@black.fi.intel.com> (raw)
In-Reply-To: <CALq1K=J-VqnTmgNj-pbfq8Ps-mgU3=10i0WiS2S5V37og9bMcw@mail.gmail.com>

Leon Romanovsky wrote:
> Hi Kirill,
> 
> On Mon, Jul 13, 2015 at 1:54 PM, Kirill A. Shutemov
> <kirill.shutemov@linux.intel.com> wrote:
> >
> > MPX setups private anonymous mapping, but uses vma->vm_ops too.
> > This can confuse core VM, as it relies on vm->vm_ops to distinguish
> > file VMAs from anonymous.
> >
> > As result we will get SIGBUS, because handle_pte_fault() thinks it's
> > file VMA without vm_ops->fault and it doesn't know how to handle the
> > situation properly.
> >
> > Let's fix that by not setting ->vm_ops.
> >
> > We don't really need ->vm_ops here: MPX VMA can be detected with VM_MPX
> > flag. And vma_merge() will not merge MPX VMA with non-MPX VMA, because
> > ->vm_flags won't match.
> >
> > The only thing left is name of VMA. I'm not sure if it's part of ABI, or
> > we can just drop it. The patch keep it by providing arch_vma_name() on x86.
> >
> > Build tested only.
> >
> > Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
> > Cc: Dave Hansen <dave.hansen@linux.intel.com>
> > Cc: Andy Lutomirski <luto@amacapital.net>
> > Cc: Thomas Gleixner <tglx@linutronix.de>
> > ---
> >  arch/x86/mm/mmap.c |  7 +++++++
> >  arch/x86/mm/mpx.c  | 20 +-------------------
> >  2 files changed, 8 insertions(+), 19 deletions(-)
> >
> > diff --git a/arch/x86/mm/mmap.c b/arch/x86/mm/mmap.c
> > index 9d518d693b4b..844b06d67df4 100644
> > --- a/arch/x86/mm/mmap.c
> > +++ b/arch/x86/mm/mmap.c
> > @@ -126,3 +126,10 @@ void arch_pick_mmap_layout(struct mm_struct *mm)
> >                 mm->get_unmapped_area = arch_get_unmapped_area_topdown;
> >         }
> >  }
> > +
> > +const char *arch_vma_name(struct vm_area_struct *vma)
> > +{
> > +       if (vma->vm_flags & VM_MPX)
> > +               return "[mpx]";
> > +       return NULL;
> > +}
> 
> I sure that I'm missing something important. This function stores
> "[mpx]" string on this function stack and returns the pointer to that
> address. In current flow, this address is visible and accessible,
> however in can be a different in general case.

The string is not on stack. String literals are in .rodata and caller is
not allowed to modify it since it's "const char *".

-- 
 Kirill

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>

WARNING: multiple messages have this Message-ID (diff)
From: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
To: Leon Romanovsky <leon@leon.nu>
Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>,
	Andrew Morton <akpm@linux-foundation.org>,
	Oleg Nesterov <oleg@redhat.com>, Linux-MM <linux-mm@kvack.org>,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
	Dave Hansen <dave.hansen@linux.intel.com>,
	Andy Lutomirski <luto@amacapital.net>,
	Thomas Gleixner <tglx@linutronix.de>
Subject: Re: [PATCH 2/5] x86, mpx: do not set ->vm_ops on mpx VMAs
Date: Mon, 13 Jul 2015 15:29:20 +0300 (EEST)	[thread overview]
Message-ID: <20150713122920.32C8CA4@black.fi.intel.com> (raw)
In-Reply-To: <CALq1K=J-VqnTmgNj-pbfq8Ps-mgU3=10i0WiS2S5V37og9bMcw@mail.gmail.com>

Leon Romanovsky wrote:
> Hi Kirill,
> 
> On Mon, Jul 13, 2015 at 1:54 PM, Kirill A. Shutemov
> <kirill.shutemov@linux.intel.com> wrote:
> >
> > MPX setups private anonymous mapping, but uses vma->vm_ops too.
> > This can confuse core VM, as it relies on vm->vm_ops to distinguish
> > file VMAs from anonymous.
> >
> > As result we will get SIGBUS, because handle_pte_fault() thinks it's
> > file VMA without vm_ops->fault and it doesn't know how to handle the
> > situation properly.
> >
> > Let's fix that by not setting ->vm_ops.
> >
> > We don't really need ->vm_ops here: MPX VMA can be detected with VM_MPX
> > flag. And vma_merge() will not merge MPX VMA with non-MPX VMA, because
> > ->vm_flags won't match.
> >
> > The only thing left is name of VMA. I'm not sure if it's part of ABI, or
> > we can just drop it. The patch keep it by providing arch_vma_name() on x86.
> >
> > Build tested only.
> >
> > Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
> > Cc: Dave Hansen <dave.hansen@linux.intel.com>
> > Cc: Andy Lutomirski <luto@amacapital.net>
> > Cc: Thomas Gleixner <tglx@linutronix.de>
> > ---
> >  arch/x86/mm/mmap.c |  7 +++++++
> >  arch/x86/mm/mpx.c  | 20 +-------------------
> >  2 files changed, 8 insertions(+), 19 deletions(-)
> >
> > diff --git a/arch/x86/mm/mmap.c b/arch/x86/mm/mmap.c
> > index 9d518d693b4b..844b06d67df4 100644
> > --- a/arch/x86/mm/mmap.c
> > +++ b/arch/x86/mm/mmap.c
> > @@ -126,3 +126,10 @@ void arch_pick_mmap_layout(struct mm_struct *mm)
> >                 mm->get_unmapped_area = arch_get_unmapped_area_topdown;
> >         }
> >  }
> > +
> > +const char *arch_vma_name(struct vm_area_struct *vma)
> > +{
> > +       if (vma->vm_flags & VM_MPX)
> > +               return "[mpx]";
> > +       return NULL;
> > +}
> 
> I sure that I'm missing something important. This function stores
> "[mpx]" string on this function stack and returns the pointer to that
> address. In current flow, this address is visible and accessible,
> however in can be a different in general case.

The string is not on stack. String literals are in .rodata and caller is
not allowed to modify it since it's "const char *".

-- 
 Kirill

  reply	other threads:[~2015-07-13 12:29 UTC|newest]

Thread overview: 42+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-07-13 10:54 [PATCH 0/5] Make vma_is_anonymous() reliable Kirill A. Shutemov
2015-07-13 10:54 ` Kirill A. Shutemov
2015-07-13 10:54 ` [PATCH 1/5] mm: mark most vm_operations_struct const Kirill A. Shutemov
2015-07-13 10:54   ` Kirill A. Shutemov
2015-07-13 10:54 ` [PATCH 2/5] x86, mpx: do not set ->vm_ops on mpx VMAs Kirill A. Shutemov
2015-07-13 10:54   ` Kirill A. Shutemov
2015-07-13 12:06   ` Leon Romanovsky
2015-07-13 12:06     ` Leon Romanovsky
2015-07-13 12:29     ` Kirill A. Shutemov [this message]
2015-07-13 12:29       ` Kirill A. Shutemov
2015-07-13 12:42       ` Leon Romanovsky
2015-07-13 12:42         ` Leon Romanovsky
2015-07-13 16:53   ` Oleg Nesterov
2015-07-13 16:53     ` Oleg Nesterov
2015-07-13 17:05     ` Dave Hansen
2015-07-13 17:05       ` Dave Hansen
2015-07-16 11:05       ` Kirill A. Shutemov
2015-07-16 11:05         ` Kirill A. Shutemov
2015-07-16 15:53         ` Dave Hansen
2015-07-16 15:53           ` Dave Hansen
2015-07-16 16:09           ` Kirill A. Shutemov
2015-07-16 16:09             ` Kirill A. Shutemov
2015-07-16 22:26             ` [PATCH 0/1] mm, mpx: add "vm_flags_t vm_flags" arg to do_mmap_pgoff() Oleg Nesterov
2015-07-16 22:26               ` Oleg Nesterov
2015-07-16 22:26               ` [PATCH 1/1] " Oleg Nesterov
2015-07-16 22:26                 ` Oleg Nesterov
2015-07-24 14:39                 ` Paul Gortmaker
2015-07-24 14:39                   ` Paul Gortmaker
2015-07-27 19:34                   ` Mark Salter
2015-07-27 19:34                     ` Mark Salter
2015-07-13 10:54 ` [PATCH 3/5] mm: make sure all file VMAs have ->vm_ops set Kirill A. Shutemov
2015-07-13 10:54   ` Kirill A. Shutemov
2015-07-13 10:54 ` [PATCH 4/5] mm, madvise: use vma_is_anonymous() to check for anon VMA Kirill A. Shutemov
2015-07-13 10:54   ` Kirill A. Shutemov
2015-07-15 23:50   ` Minchan Kim
2015-07-15 23:50     ` Minchan Kim
2015-07-13 10:54 ` [PATCH 5/5] mm, memcontrol: " Kirill A. Shutemov
2015-07-13 10:54   ` Kirill A. Shutemov
2015-07-13 13:08   ` Johannes Weiner
2015-07-13 13:08     ` Johannes Weiner
2015-07-13 13:20     ` Kirill A. Shutemov
2015-07-13 13:20       ` Kirill A. Shutemov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20150713122920.32C8CA4@black.fi.intel.com \
    --to=kirill.shutemov@linux.intel.com \
    --cc=akpm@linux-foundation.org \
    --cc=dave.hansen@linux.intel.com \
    --cc=leon@leon.nu \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=luto@amacapital.net \
    --cc=oleg@redhat.com \
    --cc=tglx@linutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.