From: Andrey Ryabinin <a.ryabinin@samsung.com>
To: Andrew Morton <akpm@linux-foundation.org>,
Dmitry Vyukov <dvyukov@google.com>,
David Rientjes <rientjes@google.com>,
Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>,
Luiz Capitulino <lcapitulino@redhat.com>,
"Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>,
Nadia.Derbey@bull.net, aquini@redhat.com,
Joe Perches <joe@perches.com>,
manfred@colorfullife.com, avagin@openvz.org,
LKML <linux-kernel@vger.kernel.org>,
Kostya Serebryany <kcc@google.com>,
Dmitry Chernenkov <dmitryc@google.com>,
Andrey Konovalov <andreyknvl@google.com>,
Konstantin Khlebnikov <koct9i@gmail.com>,
kasan-dev <kasan-dev@googlegroups.com>
Subject: Re: [PATCH] kernel: sysctl: use 'unsigned long' type for 'zero' variable
Date: Thu, 04 Dec 2014 14:35:20 +0300 [thread overview]
Message-ID: <548046F8.5020001@samsung.com> (raw)
In-Reply-To: <20141203161917.33350777442ce949fb8e98f4@linux-foundation.org>
On 12/04/2014 03:19 AM, Andrew Morton wrote:
> On Wed, 3 Dec 2014 15:25:24 -0800 Andrew Morton <akpm@linux-foundation.org> wrote:
>
>> On Wed, 03 Dec 2014 15:41:21 +0300 Andrey Ryabinin <a.ryabinin@samsung.com> wrote:
>>
>>>
>>> Use the 'unsigned long' type for 'zero' variable to fix this.
>>> Changing type to 'unsigned long' shouldn't affect any other users
>>> of this variable.
>>>
>>> Reported-by: Dmitry Vyukov <dvyukov@google.com>
>>> Fixes: ed4d4902ebdd ("mm, hugetlb: remove hugetlb_zero and hugetlb_infinity")
>>> Signed-off-by: Andrey Ryabinin <a.ryabinin@samsung.com>
>>> ---
>>> kernel/sysctl.c | 2 +-
>>> 1 file changed, 1 insertion(+), 1 deletion(-)
>>>
>>> diff --git a/kernel/sysctl.c b/kernel/sysctl.c
>>> index 15f2511..45c45c9 100644
>>> --- a/kernel/sysctl.c
>>> +++ b/kernel/sysctl.c
>>> @@ -120,7 +120,7 @@ static int sixty = 60;
>>>
>>> static int __maybe_unused neg_one = -1;
>>>
>>> -static int zero;
>>> +static unsigned long zero;
>>> static int __maybe_unused one = 1;
>>> static int __maybe_unused two = 2;
>>> static int __maybe_unused four = 4;
>>
>> Yeah, this is ghastly.
>>
>> Look at
>>
>> {
>> .procname = "numa_balancing",
>> .data = NULL, /* filled in by handler */
>> .maxlen = sizeof(unsigned int),
>> .mode = 0644,
>> .proc_handler = sysctl_numa_balancing,
>> .extra1 = &zero,
>> .extra2 = &one,
>> },
>>
>> Now extra1 points at a long and extra2 points at an int.
>> sysctl_numa_balancing() calls proc_dointvec_minmax() and I think your
>> patch just broke big-endian 64-bit machines. "sched_autogroup_enabled"
>> breaks as well.
>
> Taking another look at this...
>
> numa_balancing will continue to work on big-endian because of course
> zero is still zero when byteswapped. But that's such a hack, isn't
> documented and doesn't work for "one", "sixty", etc.
>
Yeah, I agree it's a bit hacky.
> I'm thinking a better fix here is to switch hugetlb_sysctl_handler to
> use `int's. 2^32 hugepages is enough for anybody.
>
It's 8 petabytes for 2MB pages, so yeah should be enough.
Perhaps it also makes sense to change types for counters in 'struct hstate' from longs to ints.
> hugetlb_overcommit_handler() will need conversion also.
>
> Perhaps auditing all the proc_doulongvec_minmax callsites is the way to
> attack this.
>
I've looked through this yesterday and didn't found anything obviously wrong.
Though I could easily miss something.
next prev parent reply other threads:[~2014-12-04 11:35 UTC|newest]
Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-12-03 9:04 Out-of-bounds access in __do_proc_doulongvec_minmax Dmitry Vyukov
2014-12-03 12:39 ` Andrey Ryabinin
2014-12-03 12:41 ` [PATCH] kernel: sysctl: use 'unsigned long' type for 'zero' variable Andrey Ryabinin
2014-12-03 13:04 ` Rafael Aquini
2014-12-03 21:12 ` David Rientjes
2014-12-03 23:25 ` Andrew Morton
2014-12-04 0:19 ` Andrew Morton
2014-12-04 11:35 ` Andrey Ryabinin [this message]
2014-12-04 6:12 ` Manfred Spraul
2014-12-05 22:50 ` Andrew Morton
2014-12-13 20:51 ` Manfred Spraul
2014-12-15 6:41 ` Andrey Ryabinin
2014-12-17 14:30 ` [PATCH 1/2] hugetlb, sysctl: pass '.extra1 = NULL' rather then '.extra1 = &zero' Andrey Ryabinin
2014-12-17 14:30 ` Andrey Ryabinin
2014-12-17 14:30 ` [PATCH 2/2] mm: hugetlb: fix type of hugetlb_treat_as_movable variable Andrey Ryabinin
2014-12-17 14:30 ` Andrey Ryabinin
2014-12-18 0:39 ` David Rientjes
2014-12-18 0:39 ` David Rientjes
2014-12-18 0:38 ` [PATCH 1/2] hugetlb, sysctl: pass '.extra1 = NULL' rather then '.extra1 = &zero' David Rientjes
2014-12-18 0:38 ` David Rientjes
2014-12-03 13:27 ` Out-of-bounds access in __do_proc_doulongvec_minmax Dmitry Vyukov
2014-12-03 13:37 ` Andrey Ryabinin
2014-12-03 13:39 ` Dmitry Vyukov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=548046F8.5020001@samsung.com \
--to=a.ryabinin@samsung.com \
--cc=Nadia.Derbey@bull.net \
--cc=akpm@linux-foundation.org \
--cc=andreyknvl@google.com \
--cc=aquini@redhat.com \
--cc=avagin@openvz.org \
--cc=dmitryc@google.com \
--cc=dvyukov@google.com \
--cc=joe@perches.com \
--cc=kasan-dev@googlegroups.com \
--cc=kcc@google.com \
--cc=kirill.shutemov@linux.intel.com \
--cc=koct9i@gmail.com \
--cc=lcapitulino@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=manfred@colorfullife.com \
--cc=n-horiguchi@ah.jp.nec.com \
--cc=rientjes@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.