From: Jens Axboe <[email protected]>
To: Dan Clash <[email protected]>, Paul Moore <[email protected]>
Cc: "[email protected]" <[email protected]>,
"[email protected]" <[email protected]>,
"[email protected]" <[email protected]>,
"[email protected]" <[email protected]>
Subject: Re: [EXTERNAL] Re: audit: io_uring openat triggers audit reference count underflow in worker thread
Date: Mon, 9 Oct 2023 07:40:54 -0600 [thread overview]
Message-ID: <[email protected]> (raw)
In-Reply-To: <MW2PR2101MB1033E52DD9307F9EF15F1E85F1CEA@MW2PR2101MB1033.namprd21.prod.outlook.com>
On 10/8/23 8:38 PM, Dan Clash wrote:
> I retested with the following change as a sanity check:
>
> - BUG_ON(name->refcnt <= 0);
> + BUG_ON(atomic_read(&name->refcnt) <= 0);
>
> checkpatch.pl suggests using WARN_ON_ONCE rather than BUG.
>
> devvm ~ $ ~/linux/scripts/checkpatch.pl --patch ~/io_uring_audit_hang_atomic.patch
> WARNING: Do not crash the kernel unless it is absolutely unavoidable
> --use WARN_ON_ONCE() plus recovery code (if feasible) instead of BUG() or variants
> #28: FILE: fs/namei.c:262:
> + BUG_ON(atomic_read(&name->refcnt) <= 0);
> ...
>
> refcount_t uses WARN_ON_ONCE.
>
> I can think of three choices:
>
> 1. Use atomic_t and remove the BUG line.
> 2. Use refcount_t and remove the BUG line.
> 3. Use atomic_t and partially implement the warn behavior of refcount_t.
>
> Choice 1 and 2 seem better than choice 3.
I'd probably just make it:
if (WARN_ON_ONCE(!atomic_read(name->refcnt)))
return;
to make it a straightforward conversion.
--
Jens Axboe
next prev parent reply other threads:[~2023-10-09 13:41 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-10-06 20:09 audit: io_uring openat triggers audit reference count underflow in worker thread Dan Clash
2023-10-07 2:32 ` Jens Axboe
2023-10-07 13:11 ` Jens Axboe
2023-10-07 15:13 ` Paul Moore
2023-10-09 2:38 ` [EXTERNAL] " Dan Clash
2023-10-09 13:40 ` Jens Axboe [this message]
2023-10-12 21:12 ` Dan Clash
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
[email protected] \
[email protected] \
[email protected] \
[email protected] \
[email protected] \
[email protected] \
[email protected] \
[email protected] \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox