From: Yu Kuai <yukuai1@huaweicloud.com>
To: Linus Torvalds <torvalds@linux-foundation.org>,
Jens Axboe <axboe@kernel.dk>, Jan Kara <jack@suse.cz>,
Paolo Valente <paolo.valente@linaro.org>
Cc: "linux-block@vger.kernel.org" <linux-block@vger.kernel.org>,
"yukuai (C)" <yukuai3@huawei.com>
Subject: Re: [GIT PULL for-6.3] Block updates for 6.3
Date: Tue, 21 Feb 2023 14:39:51 +0800 [thread overview]
Message-ID: <e2071a24-cd25-e5bd-9166-a3b575b7bf4a@huaweicloud.com> (raw)
In-Reply-To: <CAHk-=wiLu7VRyPUpthiV6qMJp1eN3n_wD+vAroDsnDZq05QsLA@mail.gmail.com>
Hi,
在 2023/02/21 6:52, Linus Torvalds 写道:
> On Thu, Feb 16, 2023 at 6:54 PM Jens Axboe <axboe@kernel.dk> wrote:
>>
>> I've pushed a merged branch here:
>>
>> https://git.kernel.dk/cgit/linux-block/log/?h=for-6.3/block-merged
>
> Hmm. I do verify against suggested merges after doing my own (even
> when your suggested merge was then made stale by another later
> addition), and I think your merge was wrong wrt bfq_sync_bfqq_move(),
> which in your version does the bfq_release_process_ref() before doing
> the bic_set_bfqq().
It's right this is wrong, I think this happened as following:
1) bfq_sync_bfqq_move() is introduced in commit 9778369a2d6c ("block,
bfq: split sync bfq_queues on a per-actuator basis"), which is merged to
for-6.3 branch.
2) commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'")
is merged to mainline.
3) later, the fix for 2) b600de2d7d3a ("block, bfq: fix uaf for bfqq in
bic_set_bfqq()") is merged to mainline as well, however, I missed the
change in bfq_sync_bfqq_move() in for-6.3 brach.
4) At last, 1) is merged to mainline with some rebase, this is how
bfq_check_ioprio_change() is fixed, however, bfq_sync_bfqq_move() is
still problematic.
Thanks,
Kuai
>
> IOW, I think your merge essentially dropped one of the fixes in commit
> b600de2d7d3a ("block, bfq: fix uaf for bfqq in bic_set_bfqq()").
>
> Maybe there were reasons why that ordering wasn't required any more,
> but it looks funky (and you appear to have correctly merged the other
> case in bfq_check_ioprio_change()).
>
> Anyway, this is just a nit-picky email saying that I'm pretty sure
> I've done the merge right, but since it doesn't match what you did, I
> thought I'd mention it.
>
> Worth double-checking this, in other words. I realize you're mostly
> afk this week, so whenever you're back.
>
> Linus
> .
>
next prev parent reply other threads:[~2023-02-21 6:40 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-02-17 2:54 [GIT PULL for-6.3] Block updates for 6.3 Jens Axboe
2023-02-17 19:23 ` Jens Axboe
2023-02-20 23:00 ` pr-tracker-bot
2023-02-20 22:52 ` Linus Torvalds
2023-02-21 6:39 ` Yu Kuai [this message]
2023-02-21 8:29 ` [PATCH] block, bfq: free 'sync_bfqq' after bic_set_bfqq() in bfq_sync_bfqq_move() Yu Kuai
2023-02-21 9:14 ` Damien Le Moal
2023-02-21 9:35 ` Yu Kuai
2023-02-22 0:04 ` Jens Axboe
2023-02-22 0:03 ` [GIT PULL for-6.3] Block updates for 6.3 Jens Axboe
2023-02-22 1:07 ` Linus Torvalds
2023-02-22 3:48 ` Jens Axboe
2023-02-20 23:00 ` pr-tracker-bot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=e2071a24-cd25-e5bd-9166-a3b575b7bf4a@huaweicloud.com \
--to=yukuai1@huaweicloud.com \
--cc=axboe@kernel.dk \
--cc=jack@suse.cz \
--cc=linux-block@vger.kernel.org \
--cc=paolo.valente@linaro.org \
--cc=torvalds@linux-foundation.org \
--cc=yukuai3@huawei.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox