lkml.org 
[lkml]   [2016]   [Aug]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Date
    Subject[PATCH 3.16 274/305] fs: limit filesystem stacking depth
    3.16.37-rc1 review patch.  If anyone has any objections, please let me know.

    ------------------

    From: Miklos Szeredi <mszeredi@suse.cz>

    commit 69c433ed2ecd2d3264efd7afec4439524b319121 upstream.

    Add a simple read-only counter to super_block that indicates how deep this
    is in the stack of filesystems. Previously ecryptfs was the only stackable
    filesystem and it explicitly disallowed multiple layers of itself.

    Overlayfs, however, can be stacked recursively and also may be stacked
    on top of ecryptfs or vice versa.

    To limit the kernel stack usage we must limit the depth of the
    filesystem stack. Initially the limit is set to 2.

    Signed-off-by: Miklos Szeredi <mszeredi@suse.cz>
    [bwh: Backported to 3.16: drop changes to overlayfs]
    Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
    ---
    fs/ecryptfs/main.c | 7 +++++++
    include/linux/fs.h | 11 +++++++++++
    3 files changed, 27 insertions(+)

    --- a/fs/ecryptfs/main.c
    +++ b/fs/ecryptfs/main.c
    @@ -576,6 +576,13 @@ static struct dentry *ecryptfs_mount(str
    s->s_maxbytes = path.dentry->d_sb->s_maxbytes;
    s->s_blocksize = path.dentry->d_sb->s_blocksize;
    s->s_magic = ECRYPTFS_SUPER_MAGIC;
    + s->s_stack_depth = path.dentry->d_sb->s_stack_depth + 1;
    +
    + rc = -EINVAL;
    + if (s->s_stack_depth > FILESYSTEM_MAX_STACK_DEPTH) {
    + pr_err("eCryptfs: maximum fs stacking depth exceeded\n");
    + goto out_free;
    + }

    inode = ecryptfs_get_inode(path.dentry->d_inode, s);
    rc = PTR_ERR(inode);
    --- a/include/linux/fs.h
    +++ b/include/linux/fs.h
    @@ -256,6 +256,12 @@ struct iattr {
    */
    #include <linux/quota.h>

    +/*
    + * Maximum number of layers of fs stack. Needs to be limited to
    + * prevent kernel stack overflow
    + */
    +#define FILESYSTEM_MAX_STACK_DEPTH 2
    +
    /**
    * enum positive_aop_returns - aop return codes with specific semantics
    *
    @@ -1258,6 +1264,11 @@ struct super_block {
    struct list_lru s_dentry_lru ____cacheline_aligned_in_smp;
    struct list_lru s_inode_lru ____cacheline_aligned_in_smp;
    struct rcu_head rcu;
    +
    + /*
    + * Indicates how deep in a filesystem stack this SB is
    + */
    + int s_stack_depth;
    };

    extern struct timespec current_fs_time(struct super_block *sb);
    \
     
     \ /
      Last update: 2016-09-17 09:56    [W:4.042 / U:0.384 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site