Linus Torvalds 6b3a707736 Merge branch 'page-refs' (page ref overflow) ... Merge page ref overflow branch. Jann Horn reported that he can overflow the page ref count with sufficient memory (and a filesystem that is intentionally extremely slow). Admittedly it's not exactly easy. To have more than four billion references to a page requires a minimum of 32GB of kernel memory just for the pointers to the pages, much less any metadata to keep track of those pointers. Jann needed a total of 140GB of memory and a specially crafted filesystem that leaves all reads pending (in order to not ever free the page references and just keep adding more). Still, we have a fairly straightforward way to limit the two obvious user-controllable sources of page references: direct-IO like page references gotten through get_user_pages(), and the splice pipe page duplication. So let's just do that. * branch page-refs: fs: prevent page refcount overflow in pipe_buf_get mm: prevent get_user_pages() from overflowing page refcount mm: add 'try_get_page()' helper function mm: make page ref count overflow check tighter and more explicit		2019-04-14 15:09:40 -07:00
..
bpf	xdp: fix cpumap redirect SKB creation bug	2019-03-29 12:15:02 -07:00
cgroup	Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 14:08:19 -07:00
configs	…
debug	…
dma	dma-debug: only skip one stackframe entry	2019-04-11 19:29:50 +02:00
events	perf/core: Fix perf_event_disable_inatomic() race	2019-04-12 08:55:55 +02:00
gcov	kernel/gcov/gcc_3_4.c: use struct_size() in kzalloc()	2019-03-07 18:32:02 -08:00
irq	genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()	2019-04-05 17:41:41 +02:00
livepatch	…
locking	locking/lockdep: Zap lock classes even with lock debugging disabled	2019-04-10 13:45:59 +02:00
power	treewide: add checks for the return value of memblock_alloc*()	2019-03-12 10:04:02 -07:00
printk	fbdev changes for v5.1:	2019-03-15 14:22:59 -07:00
rcu	Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-03-06 07:59:36 -08:00
sched	sched/fair: Do not re-read ->h_load_next during hierarchical load calculation	2019-04-03 09:50:22 +02:00
time	alarmtimer: Return correct remaining time	2019-04-10 15:23:26 +02:00
trace	Merge branch 'page-refs' (page ref overflow)	2019-04-14 15:09:40 -07:00
.gitignore	kernel/configs: use .incbin directive to embed config_data.gz	2019-03-07 18:32:02 -08:00
Kconfig.freezer	…
Kconfig.hz	…
Kconfig.locks	…
Kconfig.preempt	…
Makefile	kernel/configs: use .incbin directive to embed config_data.gz	2019-03-07 18:32:02 -08:00
acct.c	…
async.c	…
audit.c	…
audit.h	…
audit_fsnotify.c	…
audit_tree.c	…
audit_watch.c	…
auditfilter.c	…
auditsc.c	…
backtracetest.c	…
bounds.c	…
capability.c	…
compat.c	…
configs.c	kernel/configs: use .incbin directive to embed config_data.gz	2019-03-07 18:32:02 -08:00
context_tracking.c	…
cpu.c	cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n	2019-03-28 13:34:58 +01:00
cpu_pm.c	…
crash_core.c	…
crash_dump.c	…
cred.c	…
delayacct.c	…
dma.c	…
elfcore.c	…
exec_domain.c	…
exit.c	Merge branch 'for-5.1' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2019-03-07 10:11:41 -08:00
extable.c	…
fail_function.c	…
fork.c	5.1 Merge Window Pull Request	2019-03-09 15:53:03 -08:00
freezer.c	…
futex.c	futex: Ensure that futex address is aligned in handle_futex_death()	2019-03-22 13:05:26 +01:00
groups.c	…
hung_task.c	kernel/hung_task.c: Use continuously blocked time when reporting.	2019-03-07 18:31:59 -08:00
iomem.c	…
irq_work.c	…
jump_label.c	…
kallsyms.c	…
kcmp.c	…
kcov.c	kcov: convert kcov.refcount to refcount_t	2019-03-07 18:32:02 -08:00
kexec.c	…
kexec_core.c	…
kexec_file.c	…
kexec_internal.h	…
kmod.c	…
kprobes.c	…
ksysfs.c	…
kthread.c	Merge branch 'akpm' (patches from Andrew)	2019-03-06 10:31:36 -08:00
latencytop.c	…
memremap.c	…
module-internal.h	…
module.c	dynamic_debug: add static inline stub for ddebug_add_module	2019-03-07 18:32:00 -08:00
module_signing.c	…
notifier.c	…
nsproxy.c	…
padata.c	…
panic.c	kernel/panic.c: taint: fix debugfs_simple_attr.cocci warnings	2019-03-07 18:31:59 -08:00
params.c	…
pid.c	…
pid_namespace.c	…
profile.c	…
ptrace.c	ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK	2019-03-29 10:01:37 -07:00
range.c	…
reboot.c	…
relay.c	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-03-12 13:27:20 -07:00
resource.c	device-dax for 5.1	2019-03-16 13:05:32 -07:00
rseq.c	…
seccomp.c	syscalls: Remove start and number from syscall_get_arguments() args	2019-04-05 09:26:43 -04:00
signal.c	signal: don't silently convert SI_USER signals to non-current pidfd	2019-04-01 23:03:18 +02:00
smp.c	…
smpboot.c	…
smpboot.h	…
softirq.c	…
stackleak.c	…
stacktrace.c	…
stop_machine.c	…
sys.c	Merge branch 'akpm' (patches from Andrew)	2019-03-07 19:25:37 -08:00
sys_ni.c	pidfd patches for v5.1-rc1	2019-03-16 13:47:14 -07:00
sysctl.c	kernel/sysctl.c: fix out-of-bounds access when setting file-max	2019-04-05 16:02:31 -10:00
sysctl_binary.c	…
task_work.c	…
taskstats.c	…
test_kprobes.c	…
torture.c	…
tracepoint.c	…
tsacct.c	…
ucount.c	…
uid16.c	…
uid16.h	…
umh.c	…
up.c	…
user-return-notifier.c	…
user.c	…
user_namespace.c	…
utsname.c	…
utsname_sysctl.c	…
watchdog.c	watchdog: Respect watchdog cpumask on CPU hotplug	2019-03-28 13:32:01 +01:00
watchdog_hld.c	…
workqueue.c	workqueue: Only unregister a registered lockdep key	2019-03-21 12:00:18 +01:00
workqueue_internal.h	…