Linus Torvalds 6b3a707736 Merge branch 'page-refs' (page ref overflow) ... Merge page ref overflow branch. Jann Horn reported that he can overflow the page ref count with sufficient memory (and a filesystem that is intentionally extremely slow). Admittedly it's not exactly easy. To have more than four billion references to a page requires a minimum of 32GB of kernel memory just for the pointers to the pages, much less any metadata to keep track of those pointers. Jann needed a total of 140GB of memory and a specially crafted filesystem that leaves all reads pending (in order to not ever free the page references and just keep adding more). Still, we have a fairly straightforward way to limit the two obvious user-controllable sources of page references: direct-IO like page references gotten through get_user_pages(), and the splice pipe page duplication. So let's just do that. * branch page-refs: fs: prevent page refcount overflow in pipe_buf_get mm: prevent get_user_pages() from overflowing page refcount mm: add 'try_get_page()' helper function mm: make page ref count overflow check tighter and more explicit		2019-04-14 15:09:40 -07:00
..
9p	Pull request for inlusion in 5.1	2019-03-17 09:10:56 -07:00
adfs
affs
afs	afs: Fix StoreData op marshalling	2019-03-28 08:54:20 -07:00
autofs	autofs: clear O_NONBLOCK on the pipe	2019-03-07 18:32:01 -08:00
befs
bfs
btrfs	for-5.1-rc4-tag	2019-04-11 14:19:02 -07:00
cachefiles
ceph	ceph: fix use-after-free on symlink traversal	2019-03-27 19:00:37 +01:00
cifs	cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid.	2019-04-01 14:33:38 -05:00
coda
configfs
cramfs
crypto	fscrypt updates for v5.1	2019-03-09 10:54:24 -08:00
debugfs	debugfs: fix use-after-free on symlink traversal	2019-04-01 00:31:02 -04:00
devpts
dlm
ecryptfs
efivarfs
efs
exportfs
ext2	\n	2019-03-07 09:01:33 -08:00
ext4	Miscellaneous ext4 bug fixes for 5.1.	2019-03-24 13:41:37 -07:00
f2fs	f2fs-for-5.1-rc1	2019-03-15 13:42:53 -07:00
fat	fat: enable .splice_write to support splice on O_DIRECT file	2019-03-07 18:32:01 -08:00
freevxfs
fscache
fuse	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
gfs2	We've only got three patches ready for this merge window:	2019-03-09 11:52:11 -08:00
hfs
hfsplus
hostfs
hpfs	hpfs: fix spelling mistake "partion" -> "partition"	2019-03-12 09:58:03 -07:00
hugetlbfs	hugetlbfs: fix memory leak for resv_map	2019-04-05 16:02:31 -10:00
isofs
jbd2
jffs2	jffs2: fix use-after-free on symlink traversal	2019-04-01 00:31:02 -04:00
jfs
kernfs	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
lockd	NFS: fix mount/umount race in nlmclnt.	2019-03-18 22:39:34 -04:00
minix
nfs	NFSv4.1 fix incorrect return value in copy_file_range	2019-04-11 15:23:48 -04:00
nfs_common
nfsd	Miscellaneous NFS server fixes. Probably the most visible bug is one	2019-03-12 15:06:54 -07:00
nilfs2
nls
notify	fanotify: Allow copying of file handle to userspace	2019-03-19 09:29:07 +01:00
ntfs
ocfs2	ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock	2019-03-29 10:01:37 -07:00
omfs
openpromfs
orangefs	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 13:27:20 -07:00
overlayfs
proc	ptrace: Remove maxargs from task_current_syscall()	2019-04-04 09:17:15 -04:00
pstore
qnx4
qnx6
quota
ramfs
reiserfs
romfs
squashfs
sysfs	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-16 10:31:02 -07:00
sysv
tracefs
ubifs	ubifs: fix use-after-free on symlink traversal	2019-04-01 00:31:02 -04:00
udf	udf: Propagate errors from udf_truncate_extents()	2019-03-18 16:30:02 +01:00
ufs
xfs	xfs: serialize unaligned dio writes against all other dio writes	2019-03-26 08:37:55 -07:00
aio.c	aio: use kmem_cache_free() instead of kfree()	2019-04-04 20:13:59 -04:00
anon_inodes.c
attr.c
bad_inode.c
binfmt_aout.c
binfmt_elf_fdpic.c
binfmt_elf.c	fs/binfmt_elf.c: spread const a little	2019-03-07 18:32:01 -08:00
binfmt_em86.c
binfmt_flat.c
binfmt_misc.c
binfmt_script.c
block_dev.c	block: fix the return errno for direct IO	2019-04-11 21:22:21 -06:00
buffer.c
char_dev.c
compat_binfmt_elf.c
compat_ioctl.c
compat.c
coredump.c
d_path.c
dax.c
dcache.c
dcookies.c
direct-io.c
drop_caches.c
eventfd.c
eventpoll.c	epoll: use rwlock in order to reduce ep_poll_callback() contention	2019-03-07 18:32:01 -08:00
exec.c	exec: increase BINPRM_BUF_SIZE to 256	2019-03-07 18:32:01 -08:00
fcntl.c
fhandle.c
file_table.c
file.c	io_uring-2019-03-06	2019-03-08 14:48:40 -08:00
filesystems.c
fs_context.c
fs_parser.c	fs: fs_parser: fix printk format warning	2019-03-29 10:01:38 -07:00
fs_pin.c
fs_struct.c
fs_types.c
fs-writeback.c
inode.c
internal.h
io_uring.c	io_uring: restrict IORING_SETUP_SQPOLL to root	2019-04-08 10:51:01 -06:00
ioctl.c
iomap.c	block: add BIO_NO_PAGE_REF flag	2019-03-18 10:44:48 -06:00
Kconfig	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
Kconfig.binfmt
libfs.c
locks.c	locks: wake any locks blocked on request before deadlock check	2019-03-25 08:36:24 -04:00
Makefile	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
mbcache.c
mount.h
mpage.c
namei.c	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
namespace.c	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
no-block.c
nsfs.c
open.c	fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock	2019-04-06 07:01:55 -10:00
pipe.c	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
pnode.c
pnode.h
posix_acl.c
proc_namespace.c
read_write.c	fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock	2019-04-06 07:01:55 -10:00
readdir.c
select.c
seq_file.c
signalfd.c
splice.c	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
stack.c
stat.c
statfs.c
super.c
sync.c
timerfd.c
userfaultfd.c
utimes.c
xattr.c