Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1740977 > unrolled thread
| Started by | Eric Biggers <ebiggers3@gmail.com> |
|---|---|
| First post | 2017-09-27 22:00 +0200 |
| Last post | 2017-09-27 22:00 +0200 |
| Articles | 1 — 1 participant |
Back to article view | Back to linux.kernel
This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by
below is the oldest one visible, not the original post.
[PATCH v3 3/7] KEYS: load key flags atomically in key_is_instantiated() Eric Biggers <ebiggers3@gmail.com> - 2017-09-27 22:00 +0200
| From | Eric Biggers <ebiggers3@gmail.com> |
|---|---|
| Date | 2017-09-27 22:00 +0200 |
| Subject | [PATCH v3 3/7] KEYS: load key flags atomically in key_is_instantiated() |
| Message-ID | <uuqEW-7nX-11@gated-at.bofh.it> |
From: Eric Biggers <ebiggers@google.com>
In key_is_instantiated(), we check for KEY_FLAG_INSTANTIATED set and
KEY_FLAG_NEGATIVE unset. But this was done as two separate bit tests
which were not atomic with respect to each other, and had no memory
barrier providing ordering. Therefore, it was theoretically possible
for the function to incorrectly return true if called while the key was
being negatively instantiated.
There also needs to be a memory barrier before anything which is only
meaningful for positively instantiated keys, e.g. ->payload and
->datalen, can be read --- which some of the ->describe() methods do.
Fix both these problems by loading the flags using smp_load_acquire().
Signed-off-by: Eric Biggers <ebiggers@google.com>
---
include/linux/key.h | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/include/linux/key.h b/include/linux/key.h
index b7b590d7c480..551f099f2f6a 100644
--- a/include/linux/key.h
+++ b/include/linux/key.h
@@ -372,8 +372,11 @@ extern void key_set_timeout(struct key *, unsigned);
*/
static inline bool key_is_instantiated(const struct key *key)
{
- return test_bit(KEY_FLAG_INSTANTIATED, &key->flags) &&
- !test_bit(KEY_FLAG_NEGATIVE, &key->flags);
+ /* Pairs with RELEASE in mark_key_instantiated() */
+ unsigned long flags = smp_load_acquire(&key->flags);
+
+ return (flags & (1 << KEY_FLAG_INSTANTIATED)) &&
+ !(flags & (1 << KEY_FLAG_NEGATIVE));
}
#define dereference_key_rcu(KEY) \
--
2.14.2.822.g60be5d43e6-goog
Back to top | Article view | linux.kernel
csiph-web