1
0
Fork 0
alistair23-linux/security/apparmor
Michal Hocko a7c3e901a4 mm: introduce kv[mz]alloc helpers
Patch series "kvmalloc", v5.

There are many open coded kmalloc with vmalloc fallback instances in the
tree.  Most of them are not careful enough or simply do not care about
the underlying semantic of the kmalloc/page allocator which means that
a) some vmalloc fallbacks are basically unreachable because the kmalloc
part will keep retrying until it succeeds b) the page allocator can
invoke a really disruptive steps like the OOM killer to move forward
which doesn't sound appropriate when we consider that the vmalloc
fallback is available.

As it can be seen implementing kvmalloc requires quite an intimate
knowledge if the page allocator and the memory reclaim internals which
strongly suggests that a helper should be implemented in the memory
subsystem proper.

Most callers, I could find, have been converted to use the helper
instead.  This is patch 6.  There are some more relying on __GFP_REPEAT
in the networking stack which I have converted as well and Eric Dumazet
was not opposed [2] to convert them as well.

[1] http://lkml.kernel.org/r/20170130094940.13546-1-mhocko@kernel.org
[2] http://lkml.kernel.org/r/1485273626.16328.301.camel@edumazet-glaptop3.roam.corp.google.com

This patch (of 9):

Using kmalloc with the vmalloc fallback for larger allocations is a
common pattern in the kernel code.  Yet we do not have any common helper
for that and so users have invented their own helpers.  Some of them are
really creative when doing so.  Let's just add kv[mz]alloc and make sure
it is implemented properly.  This implementation makes sure to not make
a large memory pressure for > PAGE_SZE requests (__GFP_NORETRY) and also
to not warn about allocation failures.  This also rules out the OOM
killer as the vmalloc is a more approapriate fallback than a disruptive
user visible action.

This patch also changes some existing users and removes helpers which
are specific for them.  In some cases this is not possible (e.g.
ext4_kvmalloc, libcfs_kvzalloc) because those seems to be broken and
require GFP_NO{FS,IO} context which is not vmalloc compatible in general
(note that the page table allocation is GFP_KERNEL).  Those need to be
fixed separately.

While we are at it, document that __vmalloc{_node} about unsupported gfp
mask because there seems to be a lot of confusion out there.
kvmalloc_node will warn about GFP_KERNEL incompatible (which are not
superset) flags to catch new abusers.  Existing ones would have to die
slowly.

[sfr@canb.auug.org.au: f2fs fixup]
  Link: http://lkml.kernel.org/r/20170320163735.332e64b7@canb.auug.org.au
Link: http://lkml.kernel.org/r/20170306103032.2540-2-mhocko@kernel.org
Signed-off-by: Michal Hocko <mhocko@suse.com>
Signed-off-by: Stephen Rothwell <sfr@canb.auug.org.au>
Reviewed-by: Andreas Dilger <adilger@dilger.ca>	[ext4 part]
Acked-by: Vlastimil Babka <vbabka@suse.cz>
Cc: John Hubbard <jhubbard@nvidia.com>
Cc: David Miller <davem@davemloft.net>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2017-05-08 17:15:12 -07:00
..
include mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
Makefile apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00
apparmorfs.c mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
audit.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
capability.c apparmor: update cap audit to check SECURITY_CAP_NOAUDIT 2017-01-16 01:18:50 -08:00
context.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
crypto.c apparmor: use SHASH_DESC_ON_STACK 2017-04-07 08:58:35 +10:00
domain.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace 2017-02-23 20:33:51 -08:00
file.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
ipc.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
lib.c mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
lsm.c apparmor: Make path_max parameter readonly 2017-04-07 08:58:36 +10:00
match.c mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
nulldfa.in apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
path.c apparmor: internal paths should be treated as disconnected 2016-07-12 08:43:10 -07:00
policy.c apparmor: fix invalid reference to index variable of iterator line 836 2017-04-07 08:58:36 +10:00
policy_ns.c apparmor: track ns level so it can be used to help in view checks 2017-01-16 01:18:36 -08:00
policy_unpack.c mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
procattr.c apparmor: convert change_profile to use fqname later to give better control 2017-01-16 01:18:49 -08:00
resource.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00