- Kernel - lists.openatom.io

[PATCH OpenHarmony-5.10 0/3] mm: add anon vma naming support
by yiyuchangchun＠126.com 10 Dec '21

10 Dec '21

From: Yu Changchun <yuchangchun1(a)huawei.com> Colin Cross (2): mm: rearrange madvise code to allow for reuse mm: add a field to store names for private anonymous memory Suren Baghdasaryan (1): mm: add anonymous vma name refcounting Documentation/filesystems/proc.rst | 2 + fs/proc/task_mmu.c | 12 +- fs/userfaultfd.c | 7 +- include/linux/mm.h | 13 +- include/linux/mm_types.h | 71 ++++- include/uapi/linux/prctl.h | 3 + kernel/fork.c | 2 + kernel/sys.c | 63 ++++ mm/Kconfig | 14 + mm/madvise.c | 487 +++++++++++++++++++---------- mm/mempolicy.c | 3 +- mm/mlock.c | 2 +- mm/mmap.c | 38 ++- mm/mprotect.c | 2 +- 14 files changed, 532 insertions(+), 187 deletions(-) -- 2.25.1

1 3

[PATCH OpenHarmony-5.10 0/2] cma reuse feature
by lijiawei 10 Dec '21

10 Dec '21

From: lijiawei <lijiawei49(a)huawei.com> Heesub Shin (1): maillist inclusion category: feature issue:#I4LUG4 CVE: NA lijiawei (1): ohos inclusion category: feature issue:#I4LUG4 CVE: NA include/linux/gfp.h | 14 +++++++++++--- include/linux/highmem.h | 4 +++- include/linux/mmzone.h | 11 ++++++++++- mm/Kconfig | 10 ++++++++++ mm/compaction.c | 2 +- mm/page_alloc.c | 36 +++++++++++++++++++++++++++++++++--- 6 files changed, 68 insertions(+), 9 deletions(-) -- 2.25.1

2 3

[PATCH OpenHarmony-5.10] ext4: wipe ext4_dir_entry2 upon file deletion
by yiyuchangchun＠126.com 10 Dec '21

10 Dec '21

From: Leah Rumancik <leah.rumancik(a)gmail.com> mainline inclusion from mainline-5.13-rc1 commit 6c0912739699d8e4b6a87086401bf3ad3c59502d category: bugfix issue: NA CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------------------------------------- Upon file deletion, zero out all fields in ext4_dir_entry2 besides rec_len. In case sensitive data is stored in filenames, this ensures no potentially sensitive data is left in the directory entry upon deletion. Also, wipe these fields upon moving a directory entry during the conversion to an htree and when splitting htree nodes. The data wiped may still exist in the journal, but there are future commits planned to address this. Signed-off-by: Leah Rumancik <leah.rumancik(a)gmail.com> Link: https://lore.kernel.org/r/20210422180834.2242353-1-leah.rumancik@gmail.com Signed-off-by: Theodore Ts'o <tytso(a)mit.edu> Signed-off-by: Baokun Li <libaokun1(a)huawei.com> Reviewed-by: Zhang Yi <yi.zhang(a)huawei.com> Signed-off-by: Chen Jun <chenjun102(a)huawei.com> Signed-off-by: Zheng Zengkai <zhengzengkai(a)huawei.com> Signed-off-by: Yu Changchun <yuchangchun1(a)huawei.com> --- fs/ext4/namei.c | 24 ++++++++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/fs/ext4/namei.c b/fs/ext4/namei.c index 4b97cca90c67..526960e34386 100644 --- a/fs/ext4/namei.c +++ b/fs/ext4/namei.c @@ -1776,7 +1776,14 @@ dx_move_dirents(char *from, char *to, struct dx_map_entry *map, int count, memcpy (to, de, rec_len); ((struct ext4_dir_entry_2 *) to)->rec_len = ext4_rec_len_to_disk(rec_len, blocksize); + + /* wipe dir_entry excluding the rec_len field */ de->inode = 0; + memset(&de->name_len, 0, ext4_rec_len_from_disk(de->rec_len, + blocksize) - + offsetof(struct ext4_dir_entry_2, + name_len)); + map++; to += rec_len; } @@ -2101,6 +2108,7 @@ static int make_indexed_dir(handle_t *handle, struct ext4_filename *fname, data2 = bh2->b_data; memcpy(data2, de, len); + memset(de, 0, len); /* wipe old data */ de = (struct ext4_dir_entry_2 *) data2; top = data2 + len; while ((char *)(de2 = ext4_next_entry(de, blocksize)) < top) @@ -2481,15 +2489,27 @@ int ext4_generic_delete_entry(struct inode *dir, entry_buf, buf_size, i)) return -EFSCORRUPTED; if (de == de_del) { - if (pde) + if (pde) { pde->rec_len = ext4_rec_len_to_disk( ext4_rec_len_from_disk(pde->rec_len, blocksize) + ext4_rec_len_from_disk(de->rec_len, blocksize), blocksize); - else + + /* wipe entire dir_entry */ + memset(de, 0, ext4_rec_len_from_disk(de->rec_len, + blocksize)); + } else { + /* wipe dir_entry excluding the rec_len field */ de->inode = 0; + memset(&de->name_len, 0, + ext4_rec_len_from_disk(de->rec_len, + blocksize) - + offsetof(struct ext4_dir_entry_2, + name_len)); + } + inode_inc_iversion(dir); return 0; } -- 2.25.1

1 0

[PATCH] ext4: wipe ext4_dir_entry2 upon file deletion
by yiyuchangchun＠126.com 08 Dec '21

08 Dec '21

From: Leah Rumancik <leah.rumancik(a)gmail.com> mainline inclusion from mainline-5.13-rc1 commit 6c0912739699d8e4b6a87086401bf3ad3c59502d category: bugfix issue: NA CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------------------------------------- Upon file deletion, zero out all fields in ext4_dir_entry2 besides rec_len. In case sensitive data is stored in filenames, this ensures no potentially sensitive data is left in the directory entry upon deletion. Also, wipe these fields upon moving a directory entry during the conversion to an htree and when splitting htree nodes. The data wiped may still exist in the journal, but there are future commits planned to address this. Signed-off-by: Leah Rumancik <leah.rumancik(a)gmail.com> Link: https://lore.kernel.org/r/20210422180834.2242353-1-leah.rumancik@gmail.com Signed-off-by: Theodore Ts'o <tytso(a)mit.edu> Signed-off-by: Baokun Li <libaokun1(a)huawei.com> Reviewed-by: Zhang Yi <yi.zhang(a)huawei.com> Signed-off-by: Chen Jun <chenjun102(a)huawei.com> Signed-off-by: Zheng Zengkai <zhengzengkai(a)huawei.com> Signed-off-by: Yu Changchun <yuchangchun1(a)huawei.com> --- fs/ext4/namei.c | 24 ++++++++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/fs/ext4/namei.c b/fs/ext4/namei.c index 4b97cca90c67..526960e34386 100644 --- a/fs/ext4/namei.c +++ b/fs/ext4/namei.c @@ -1776,7 +1776,14 @@ dx_move_dirents(char *from, char *to, struct dx_map_entry *map, int count, memcpy (to, de, rec_len); ((struct ext4_dir_entry_2 *) to)->rec_len = ext4_rec_len_to_disk(rec_len, blocksize); + + /* wipe dir_entry excluding the rec_len field */ de->inode = 0; + memset(&de->name_len, 0, ext4_rec_len_from_disk(de->rec_len, + blocksize) - + offsetof(struct ext4_dir_entry_2, + name_len)); + map++; to += rec_len; } @@ -2101,6 +2108,7 @@ static int make_indexed_dir(handle_t *handle, struct ext4_filename *fname, data2 = bh2->b_data; memcpy(data2, de, len); + memset(de, 0, len); /* wipe old data */ de = (struct ext4_dir_entry_2 *) data2; top = data2 + len; while ((char *)(de2 = ext4_next_entry(de, blocksize)) < top) @@ -2481,15 +2489,27 @@ int ext4_generic_delete_entry(struct inode *dir, entry_buf, buf_size, i)) return -EFSCORRUPTED; if (de == de_del) { - if (pde) + if (pde) { pde->rec_len = ext4_rec_len_to_disk( ext4_rec_len_from_disk(pde->rec_len, blocksize) + ext4_rec_len_from_disk(de->rec_len, blocksize), blocksize); - else + + /* wipe entire dir_entry */ + memset(de, 0, ext4_rec_len_from_disk(de->rec_len, + blocksize)); + } else { + /* wipe dir_entry excluding the rec_len field */ de->inode = 0; + memset(&de->name_len, 0, + ext4_rec_len_from_disk(de->rec_len, + blocksize) - + offsetof(struct ext4_dir_entry_2, + name_len)); + } + inode_inc_iversion(dir); return 0; } -- 2.25.1

1 0

test
by ycc 08 Dec '21

08 Dec '21

test again

1 0

test
by ycc 08 Dec '21

08 Dec '21

test again

1 0

test
by anio 07 Dec '21

07 Dec '21

this is a test ......

1 0

[PATCH OpenHarmony-4.19 00/49] pstore/blk: Introduce backend for block devices
by roger 15 Oct '21

15 Oct '21

The following patches are for OpenHarmony 4.19 kernel. These patches refer to pstore/bl from upstream. ------------------------------------------------------------- Al Viro (1): pstore: switch to copy_from_user() Christoph Hellwig (1): mark pstore-blk as broken Dmitry Osipenko (1): pstore/ram: Rate-limit "uncorrectable error in header" message Douglas Anderson (1): pstore/ram: Improve backward compatibility with older Chromebooks Greg Kroah-Hartman (1): pstore: no need to check return value of debugfs_create functions Gustavo A. R. Silva (1): pstore/ram: Replace zero-length array with flexible-array member Jiri Bohac (1): pstore: Fix typo in compression option name Joel Fernandes (Google) (2): pstore: Map PSTORE_TYPE_* to strings pstore/ram: Simplify ramoops_get_next_prz() arguments Kees Cook (19): pstore/ram: Clarify resource reservation labels pstore/ram: Standardize module name in ramoops pstore: Improve and update some comments and status output pstore/ram: Report backend assignments with finer granularity pstore: Replace open-coded << with BIT() pstore/ram: Avoid needless alloc during header write pstore/ram: Regularize prz label allocation lifetime pstore: Rename "allpstore" to "records_list" pstore: Convert "records_list" locking to mutex pstore: Refactor pstorefs record list removal pstore: Add locking around superblock changes pstore/platform: Switch pstore_info::name to const pstore/platform: Move module params after declarations pstore/ram: Adjust module param permissions to reflect reality pstore/ram: Refactor DT size parsing pstore/ram: Refactor ftrace buffer merging pstore/ftrace: Provide ftrace log merging routine pstore/ram: Introduce max_reason and convert dump_oops pstore/blk: Introduce "best_effort" mode Mukesh Ojha (1): pstore: Add mem_type property DT parsing support Pavel Tatashin (1): pstore/platform: Pass max_reason to kmesg dump Peng Wang (1): pstore: Avoid duplicate call of persistent_ram_zap() Sai Prakash Ranjan (1): pstore/ram: Fix console ramoops to show the previous boot logs Tetsuo Handa (1): pstore: Fix warning in pstore_kill_sb() Thomas Meyer (1): pstore: Fix bool initialization/comparison Vasile-Laurentiu Stanimir (1): pstore: Move kmsg_bytes default into Kconfig WeiXiong Liao (9): pstore/zone: Introduce common layer to manage storage zones pstore/blk: Introduce backend for block devices pstore/zone,blk: Add support for pmsg frontend pstore/zone,blk: Add console frontend support pstore/zone,blk: Add ftrace frontend support Documentation: Add details for pstore/blk pstore/zone: Provide way to skip "broken" zone for MTD devices pstore/blk: Provide way to query pstore configuration pstore/blk: Support non-block storage devices Yue Hu (4): pstore/ram: Replace dummy_data heap memory with stack memory pstore/ram: Move initialization earlier pstore: Avoid writing records with zero size pstore/ram: Add kmsg hlen zero check to ramoops_pstore_write() chenqiwu (1): pstore/ram: remove unnecessary ramoops_unregister_dummy() Documentation/admin-guide/pstore-blk.rst | 238 +++ Documentation/admin-guide/ramoops.rst | 18 +- .../bindings/reserved-memory/ramoops.txt | 10 +- MAINTAINERS | 5 + drivers/acpi/apei/erst.c | 2 +- drivers/platform/chrome/chromeos_pstore.c | 2 +- fs/pstore/Kconfig | 118 ++ fs/pstore/Makefile | 6 + fs/pstore/blk.c | 517 ++++++ fs/pstore/ftrace.c | 74 +- fs/pstore/inode.c | 152 +- fs/pstore/internal.h | 11 +- fs/pstore/platform.c | 78 +- fs/pstore/ram.c | 323 ++-- fs/pstore/ram_core.c | 67 +- fs/pstore/zone.c | 1469 +++++++++++++++++ include/linux/pstore.h | 37 +- include/linux/pstore_blk.h | 118 ++ include/linux/pstore_ram.h | 46 +- include/linux/pstore_zone.h | 60 + 20 files changed, 3026 insertions(+), 325 deletions(-) create mode 100644 Documentation/admin-guide/pstore-blk.rst create mode 100644 fs/pstore/blk.c create mode 100644 fs/pstore/zone.c create mode 100644 include/linux/pstore_blk.h create mode 100644 include/linux/pstore_zone.h -- 2.17.1

2 54

[PATCH OpenHarmony-4.19 00/49] pstore/blk: Introduce backend for block devices
by roger 12 Oct '21

12 Oct '21

The following patches are for OpenHarmony 4.19 kernel. These patches refer to pstore/bl from upstream. ------------------------------------------------------------- Al Viro (1): pstore: switch to copy_from_user() Christoph Hellwig (1): mark pstore-blk as broken Dmitry Osipenko (1): pstore/ram: Rate-limit "uncorrectable error in header" message Douglas Anderson (1): pstore/ram: Improve backward compatibility with older Chromebooks Greg Kroah-Hartman (1): pstore: no need to check return value of debugfs_create functions Gustavo A. R. Silva (1): pstore/ram: Replace zero-length array with flexible-array member Jiri Bohac (1): pstore: Fix typo in compression option name Joel Fernandes (Google) (2): pstore: Map PSTORE_TYPE_* to strings pstore/ram: Simplify ramoops_get_next_prz() arguments Kees Cook (19): pstore/ram: Clarify resource reservation labels pstore/ram: Standardize module name in ramoops pstore: Improve and update some comments and status output pstore/ram: Report backend assignments with finer granularity pstore: Replace open-coded << with BIT() pstore/ram: Avoid needless alloc during header write pstore/ram: Regularize prz label allocation lifetime pstore: Rename "allpstore" to "records_list" pstore: Convert "records_list" locking to mutex pstore: Refactor pstorefs record list removal pstore: Add locking around superblock changes pstore/platform: Switch pstore_info::name to const pstore/platform: Move module params after declarations pstore/ram: Adjust module param permissions to reflect reality pstore/ram: Refactor DT size parsing pstore/ram: Refactor ftrace buffer merging pstore/ftrace: Provide ftrace log merging routine pstore/ram: Introduce max_reason and convert dump_oops pstore/blk: Introduce "best_effort" mode Mukesh Ojha (1): pstore: Add mem_type property DT parsing support Pavel Tatashin (1): pstore/platform: Pass max_reason to kmesg dump Peng Wang (1): pstore: Avoid duplicate call of persistent_ram_zap() Sai Prakash Ranjan (1): pstore/ram: Fix console ramoops to show the previous boot logs Tetsuo Handa (1): pstore: Fix warning in pstore_kill_sb() Thomas Meyer (1): pstore: Fix bool initialization/comparison Vasile-Laurentiu Stanimir (1): pstore: Move kmsg_bytes default into Kconfig WeiXiong Liao (9): pstore/zone: Introduce common layer to manage storage zones pstore/blk: Introduce backend for block devices pstore/zone,blk: Add support for pmsg frontend pstore/zone,blk: Add console frontend support pstore/zone,blk: Add ftrace frontend support Documentation: Add details for pstore/blk pstore/zone: Provide way to skip "broken" zone for MTD devices pstore/blk: Provide way to query pstore configuration pstore/blk: Support non-block storage devices Yue Hu (4): pstore/ram: Replace dummy_data heap memory with stack memory pstore/ram: Move initialization earlier pstore: Avoid writing records with zero size pstore/ram: Add kmsg hlen zero check to ramoops_pstore_write() chenqiwu (1): pstore/ram: remove unnecessary ramoops_unregister_dummy() Documentation/admin-guide/pstore-blk.rst | 238 +++ Documentation/admin-guide/ramoops.rst | 18 +- .../bindings/reserved-memory/ramoops.txt | 10 +- MAINTAINERS | 5 + drivers/acpi/apei/erst.c | 2 +- drivers/platform/chrome/chromeos_pstore.c | 2 +- fs/pstore/Kconfig | 118 ++ fs/pstore/Makefile | 6 + fs/pstore/blk.c | 517 ++++++ fs/pstore/ftrace.c | 74 +- fs/pstore/inode.c | 152 +- fs/pstore/internal.h | 11 +- fs/pstore/platform.c | 78 +- fs/pstore/ram.c | 323 ++-- fs/pstore/ram_core.c | 67 +- fs/pstore/zone.c | 1469 +++++++++++++++++ include/linux/pstore.h | 37 +- include/linux/pstore_blk.h | 118 ++ include/linux/pstore_ram.h | 46 +- include/linux/pstore_zone.h | 60 + 20 files changed, 3026 insertions(+), 325 deletions(-) create mode 100644 Documentation/admin-guide/pstore-blk.rst create mode 100644 fs/pstore/blk.c create mode 100644 fs/pstore/zone.c create mode 100644 include/linux/pstore_blk.h create mode 100644 include/linux/pstore_zone.h -- 2.17.1

1 49

[PATCH OpenHarmony-4.19 00/12] OpenHarmony-4.19 cve bugfix 0929
by Yu Changchun 30 Sep '21

30 Sep '21

There are cves based on OpenHarmony-4.19 as follows: CVE-2021-3640 CVE-2021-3653 CVE-2021-3656 CVE-2021-3743 CVE-2021-3753 CVE-2021-37576 CVE-2021-3759 CVE-2021-40490 ---------------------------------------------------------------------- Desmond Cheong Zhi Xi (3): Bluetooth: schedule SCO timeouts with delayed_work Bluetooth: avoid circular locks in sco_sock_connect Bluetooth: switch to lock_sock in SCO Linus Torvalds (1): vt_kdsetmode: extend console locking Maxim Levitsky (2): KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) Nicholas Piggin (1): KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow Pavel Skripkin (1): net: qrtr: fix OOB Read in qrtr_endpoint_post Tetsuo Handa (1): Bluetooth: defer cleanup of resources in hci_unregister_dev() Theodore Ts'o (1): ext4: fix race writing to an inline_data file while its xattrs are changing Vasily Averin (1): memcg: enable accounting of ipc resources Xiaolong Huang (1): net: qrtr: fix another OOB Read in qrtr_endpoint_post arch/powerpc/kvm/book3s_rtas.c | 25 +++++++-- arch/x86/include/asm/svm.h | 2 + arch/x86/kvm/svm.c | 18 ++++--- drivers/tty/vt/vt_ioctl.c | 11 ++-- fs/ext4/inline.c | 6 +++ include/net/bluetooth/hci_core.h | 1 + ipc/msg.c | 2 +- ipc/sem.c | 9 ++-- ipc/shm.c | 2 +- net/bluetooth/hci_core.c | 16 +++--- net/bluetooth/hci_sock.c | 49 +++++++++++------ net/bluetooth/hci_sysfs.c | 3 ++ net/bluetooth/sco.c | 92 +++++++++++++++++++------------- net/qrtr/qrtr.c | 4 +- 14 files changed, 156 insertions(+), 84 deletions(-) -- 2.22.0

2 13