lkml.org 
[lkml]   [2020]   [Dec]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[RFC PATCH v2 0/2] blk-mq: Avoid use-after-free for accessing old requests
Date
This series aims to tackle the various UAF reports, like:
- https://lore.kernel.org/linux-block/8376443a-ec1b-0cef-8244-ed584b96fa96@huawei.com/
- https://lore.kernel.org/linux-block/5c3ac5af-ed81-11e4-fee3-f92175f14daf@acm.org/T/#m6c1ac11540522716f645d004e2a5a13c9f218908
- https://lore.kernel.org/linux-block/04e2f9e8-79fa-f1cb-ab23-4a15bf3f64cc@kernel.dk/

Details are in the commit messages. Most important detail is that
fastpath is untouched.

The issue addressed in patch 1/2 is pretty easy to reproduce, 2/2 not so
much.

Differences to v1:
- add 2nd patch

John Garry (2):
blk-mq: Clean up references to old requests when freeing rqs
blk-mq: Lockout tagset iter when freeing rqs

block/blk-mq-sched.c | 2 +-
block/blk-mq-tag.c | 22 +++++++++++++++++++---
block/blk-mq-tag.h | 3 +++
block/blk-mq.c | 22 ++++++++++++++++++++--
block/blk-mq.h | 2 ++
5 files changed, 45 insertions(+), 6 deletions(-)

--
2.26.2

\
 
 \ /
  Last update: 2020-12-17 12:13    [W:0.087 / U:0.176 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site