Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1646096
| From | Thomas Gleixner <tglx@linutronix.de> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | [PATCH] slub/memcg: Cure the brainless abuse of sysfs attributes |
| Date | 2017-05-20 13:00 +0200 |
| Message-ID | <tJah3-jb-5@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
memcg_propagate_slab_attrs() abuses the sysfs attribute file functions to
propagate settings from the root kmem_cache to a newly created
kmem_cache. It does that with:
attr->show(root, buf);
attr->store(new, buf, strlen(bug);
Aside of being a lazy and absurd hackery this is broken because it does not
check the return value of the show() function.
Some of the show() functions return 0 w/o touching the buffer. That means in
such a case the store function is called with the stale content of the
previous show(). That causes nonsense like invoking kmem_cache_shrink() on
a newly created kmem_cache. In the worst case it would cause handing in an
uninitialized buffer.
This should be rewritten proper by adding a propagate() callback to those
slub_attributes which must be propagated and avoid that insane conversion
to and from ASCII, but that's too large for a hot fix.
Check at least the return value of the show() function, so calling store()
with stale content is prevented.
Reported-by: Steven Rostedt <rostedt@goodmis.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: stable@vger.kernel.org
---
mm/slub.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -5512,6 +5512,7 @@ static void memcg_propagate_slab_attrs(s
char mbuf[64];
char *buf;
struct slab_attribute *attr = to_slab_attr(slab_attrs[i]);
+ ssize_t len;
if (!attr || !attr->store || !attr->show)
continue;
@@ -5536,8 +5537,9 @@ static void memcg_propagate_slab_attrs(s
buf = buffer;
}
- attr->show(root_cache, buf);
- attr->store(s, buf, strlen(buf));
+ len = attr->show(root_cache, buf);
+ if (len > 0)
+ attr->store(s, buf, len);
}
if (buffer)
Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread
[PATCH] slub/memcg: Cure the brainless abuse of sysfs attributes Thomas Gleixner <tglx@linutronix.de> - 2017-05-20 13:00 +0200
Re: [PATCH] slub/memcg: Cure the brainless abuse of sysfs attributes Christoph Hellwig <hch@infradead.org> - 2017-05-20 15:20 +0200
Re: [PATCH] slub/memcg: Cure the brainless abuse of sysfs attributes Steven Rostedt <rostedt@goodmis.org> - 2017-05-20 16:30 +0200
Re: [PATCH] slub/memcg: Cure the brainless abuse of sysfs attributes Thomas Gleixner <tglx@linutronix.de> - 2017-05-21 22:10 +0200
Re: [PATCH] slub/memcg: Cure the brainless abuse of sysfs attributes David Rientjes <rientjes@google.com> - 2017-05-22 03:30 +0200
csiph-web