p71924506
/
linux_old1
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

pstore/ram: Run without kernel crash dump region 

The ram pstore backend has always had the crash dumper frontend enabled
unconditionally. However, it was possible to effectively disable it
by setting a record_size=0. All the machinery would run (storing dumps
to the temporary crash buffer), but 0 bytes would ultimately get stored
due to there being no przs allocated for dumps. Commit 89d328f637
("pstore/ram: Correctly calculate usable PRZ bytes"), however, assumed
that there would always be at least one allocated dprz for calculating
the size of the temporary crash buffer. This was, of course, not the
case when record_size=0, and would lead to a NULL deref trying to find
the dprz buffer size:

BUG: unable to handle kernel NULL pointer dereference at (null)
...
IP: ramoops_probe+0x285/0x37e (fs/pstore/ram.c:808)

        cxt->pstore.bufsize = cxt->dprzs[0]->buffer_size;

Instead, we need to only enable the frontends based on the success of the
prz initialization and only take the needed actions when those zones are
available. (This also fixes a possible error in detecting if the ftrace
frontend should be enabled.)

Reported-and-tested-by: Yaro Slav <yaro330@gmail.com>
Fixes: 89d328f637 ("pstore/ram: Correctly calculate usable PRZ bytes")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
This commit is contained in:
Kees Cook 2019-05-30 23:37:29 -07:00
parent a9fb94a99b
commit 8880fa32c5
2 changed files with 26 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
fs/pstore/platform.c
View File

@ -608,7 +608,8 @@ int pstore_register(struct pstore_info *psi)
return -EINVAL; return -EINVAL;
} }
allocate_buf_for_compression(); if (psi->flags & PSTORE_FLAGS_DMESG)
allocate_buf_for_compression();
if (pstore_is_mounted()) if (pstore_is_mounted())
pstore_get_records(0); pstore_get_records(0);

38
fs/pstore/ram.c
View File

@ -799,27 +799,37 @@ static int ramoops_probe(struct platform_device *pdev)
goto fail_init_mprz; goto fail_init_mprz;
cxt->pstore.data = cxt; cxt->pstore.data = cxt;
/*
* Prepare frontend flags based on which areas are initialized.
* For ramoops_init_przs() cases, the "max count" variable tells
* if there are regions present. For ramoops_init_prz() cases,
* the single region size is how to check.
*/
cxt->pstore.flags = 0;
if (cxt->max_dump_cnt)
cxt->pstore.flags |= PSTORE_FLAGS_DMESG;
if (cxt->console_size)
cxt->pstore.flags |= PSTORE_FLAGS_CONSOLE;
if (cxt->max_ftrace_cnt)
cxt->pstore.flags |= PSTORE_FLAGS_FTRACE;
if (cxt->pmsg_size)
cxt->pstore.flags |= PSTORE_FLAGS_PMSG;
/* /*
* Since bufsize is only used for dmesg crash dumps, it * Since bufsize is only used for dmesg crash dumps, it
* must match the size of the dprz record (after PRZ header * must match the size of the dprz record (after PRZ header
* and ECC bytes have been accounted for). * and ECC bytes have been accounted for).
*/ */
cxt->pstore.bufsize = cxt->dprzs[0]->buffer_size; if (cxt->pstore.flags & PSTORE_FLAGS_DMESG) {
cxt->pstore.buf = kzalloc(cxt->pstore.bufsize, GFP_KERNEL); cxt->pstore.bufsize = cxt->dprzs[0]->buffer_size;
if (!cxt->pstore.buf) { cxt->pstore.buf = kzalloc(cxt->pstore.bufsize, GFP_KERNEL);
pr_err("cannot allocate pstore crash dump buffer\n"); if (!cxt->pstore.buf) {
err = -ENOMEM; pr_err("cannot allocate pstore crash dump buffer\n");
goto fail_clear; err = -ENOMEM;
goto fail_clear;
}
} }
cxt->pstore.flags = PSTORE_FLAGS_DMESG;
if (cxt->console_size)
cxt->pstore.flags |= PSTORE_FLAGS_CONSOLE;
if (cxt->ftrace_size)
cxt->pstore.flags |= PSTORE_FLAGS_FTRACE;
if (cxt->pmsg_size)
cxt->pstore.flags |= PSTORE_FLAGS_PMSG;
err = pstore_register(&cxt->pstore); err = pstore_register(&cxt->pstore);
if (err) { if (err) {
pr_err("registering with pstore failed\n"); pr_err("registering with pstore failed\n");