Linus Torvalds 6b3a707736 Merge branch 'page-refs' (page ref overflow) ... Merge page ref overflow branch. Jann Horn reported that he can overflow the page ref count with sufficient memory (and a filesystem that is intentionally extremely slow). Admittedly it's not exactly easy. To have more than four billion references to a page requires a minimum of 32GB of kernel memory just for the pointers to the pages, much less any metadata to keep track of those pointers. Jann needed a total of 140GB of memory and a specially crafted filesystem that leaves all reads pending (in order to not ever free the page references and just keep adding more). Still, we have a fairly straightforward way to limit the two obvious user-controllable sources of page references: direct-IO like page references gotten through get_user_pages(), and the splice pipe page duplication. So let's just do that. * branch page-refs: fs: prevent page refcount overflow in pipe_buf_get mm: prevent get_user_pages() from overflowing page refcount mm: add 'try_get_page()' helper function mm: make page ref count overflow check tighter and more explicit		2019-04-14 15:09:40 -07:00
..
9p	Pull request for inlusion in 5.1	2019-03-17 09:10:56 -07:00
adfs
affs
afs	afs: Fix StoreData op marshalling	2019-03-28 08:54:20 -07:00
autofs	autofs: clear O_NONBLOCK on the pipe	2019-03-07 18:32:01 -08:00
befs
bfs
btrfs	for-5.1-rc4-tag	2019-04-11 14:19:02 -07:00
cachefiles
ceph	ceph: fix use-after-free on symlink traversal	2019-03-27 19:00:37 +01:00
cifs	cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid.	2019-04-01 14:33:38 -05:00
coda
configfs
cramfs
crypto	fscrypt updates for v5.1	2019-03-09 10:54:24 -08:00
debugfs	debugfs: fix use-after-free on symlink traversal	2019-04-01 00:31:02 -04:00
devpts
dlm	socket: Rename SO_RCVTIMEO/ SO_SNDTIMEO with _OLD suffixes	2019-02-03 11:17:31 -08:00
ecryptfs
efivarfs
efs
exportfs
ext2	\n	2019-03-07 09:01:33 -08:00
ext4	Miscellaneous ext4 bug fixes for 5.1.	2019-03-24 13:41:37 -07:00
f2fs	f2fs-for-5.1-rc1	2019-03-15 13:42:53 -07:00
fat	fat: enable .splice_write to support splice on O_DIRECT file	2019-03-07 18:32:01 -08:00
freevxfs
fscache
fuse	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
gfs2	We've only got three patches ready for this merge window:	2019-03-09 11:52:11 -08:00
hfs
hfsplus
hostfs
hpfs	hpfs: fix spelling mistake "partion" -> "partition"	2019-03-12 09:58:03 -07:00
hugetlbfs	hugetlbfs: fix memory leak for resv_map	2019-04-05 16:02:31 -10:00
isofs
jbd2	jbd2: jbd2_get_transaction does not need to return a value	2019-03-01 00:36:57 -05:00
jffs2	jffs2: fix use-after-free on symlink traversal	2019-04-01 00:31:02 -04:00
jfs
kernfs	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
lockd	NFS: fix mount/umount race in nlmclnt.	2019-03-18 22:39:34 -04:00
minix
nfs	NFSv4.1 fix incorrect return value in copy_file_range	2019-04-11 15:23:48 -04:00
nfs_common
nfsd	Miscellaneous NFS server fixes. Probably the most visible bug is one	2019-03-12 15:06:54 -07:00
nilfs2	XArray: Change xa_insert to return -EBUSY	2019-02-06 13:12:15 -05:00
nls
notify	fanotify: Allow copying of file handle to userspace	2019-03-19 09:29:07 +01:00
ntfs
ocfs2	ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock	2019-03-29 10:01:37 -07:00
omfs
openpromfs
orangefs	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 13:27:20 -07:00
overlayfs	ovl: Do not lose security.capability xattr over metadata file copy-up	2019-02-13 11:14:46 +01:00
proc	ptrace: Remove maxargs from task_current_syscall()	2019-04-04 09:17:15 -04:00
pstore	pstore/ram: Avoid needless alloc during header write	2019-02-12 13:45:53 -08:00
qnx4
qnx6
quota
ramfs
reiserfs
romfs
squashfs
sysfs	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-16 10:31:02 -07:00
sysv
tracefs
ubifs	ubifs: fix use-after-free on symlink traversal	2019-04-01 00:31:02 -04:00
udf	udf: Propagate errors from udf_truncate_extents()	2019-03-18 16:30:02 +01:00
ufs
xfs	xfs: serialize unaligned dio writes against all other dio writes	2019-03-26 08:37:55 -07:00
aio.c	aio: use kmem_cache_free() instead of kfree()	2019-04-04 20:13:59 -04:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c	a.out: remove core dumping support	2019-03-05 10:00:35 -08:00
binfmt_elf_fdpic.c
binfmt_elf.c	fs/binfmt_elf.c: spread const a little	2019-03-07 18:32:01 -08:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c	exec: load_script: Do not exec truncated interpreter path	2019-02-18 16:49:36 -08:00
block_dev.c	block: fix the return errno for direct IO	2019-04-11 21:22:21 -06:00
buffer.c	fs: fix guard_bio_eod to check for real EOD errors	2019-02-28 13:59:41 -07:00
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c
compat.c
coredump.c
d_path.c
dax.c	dax: Flush partial PMDs correctly	2019-03-01 17:24:48 -08:00
dcache.c
dcookies.c
direct-io.c	block: allow bio_for_each_segment_all() to iterate over multi-page bvec	2019-02-15 08:40:11 -07:00
drop_caches.c
eventfd.c
eventpoll.c	epoll: use rwlock in order to reduce ep_poll_callback() contention	2019-03-07 18:32:01 -08:00
exec.c	exec: increase BINPRM_BUF_SIZE to 256	2019-03-07 18:32:01 -08:00
fcntl.c
fhandle.c
file_table.c	fs: add fget_many() and fput_many()	2019-02-28 08:24:23 -07:00
file.c	io_uring-2019-03-06	2019-03-08 14:48:40 -08:00
filesystems.c	vfs: Implement a filesystem superblock creation/configuration context	2019-02-28 03:29:26 -05:00
fs_context.c	vfs: Implement logging through fs_context	2019-02-28 03:29:37 -05:00
fs_parser.c	fs: fs_parser: fix printk format warning	2019-03-29 10:01:38 -07:00
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c
inode.c	fs/inode.c: inode_set_flags(): replace opencoded set_mask_bits()	2019-03-05 21:07:13 -08:00
internal.h	vfs: Add configuration parser helpers	2019-02-28 03:28:53 -05:00
io_uring.c	io_uring: restrict IORING_SETUP_SQPOLL to root	2019-04-08 10:51:01 -06:00
ioctl.c
iomap.c	block: add BIO_NO_PAGE_REF flag	2019-03-18 10:44:48 -06:00
Kconfig	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
Kconfig.binfmt
libfs.c
locks.c	locks: wake any locks blocked on request before deadlock check	2019-03-25 08:36:24 -04:00
Makefile	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
mbcache.c
mount.h
mpage.c	block: allow bio_for_each_segment_all() to iterate over multi-page bvec	2019-02-15 08:40:11 -07:00
namei.c	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
namespace.c	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
no-block.c
nsfs.c
open.c	fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock	2019-04-06 07:01:55 -10:00
pipe.c	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c	fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock	2019-04-06 07:01:55 -10:00
readdir.c
select.c	y2038: syscalls: rename y2038 compat syscalls	2019-02-07 00:13:27 +01:00
seq_file.c
signalfd.c
splice.c	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
stack.c
stat.c
statfs.c	vfs: add vfs_get_fsid() helper	2019-02-07 16:38:35 +01:00
super.c	vfs: Add some logging to the core users of the fs_context log	2019-02-28 03:29:38 -05:00
sync.c
timerfd.c	y2038: syscalls: rename y2038 compat syscalls	2019-02-07 00:13:27 +01:00
userfaultfd.c
utimes.c	y2038: syscalls: rename y2038 compat syscalls	2019-02-07 00:13:27 +01:00
xattr.c