Re: [rfc] increase struct page size?!

From: Nick Piggin
Date: Mon May 21 2007 - 05:45:22 EST


On Mon, May 21, 2007 at 11:12:59AM +0200, Helge Hafting wrote:
> Andrew Morton wrote:
> >On Sat, 19 May 2007 11:15:01 -0700 William Lee Irwin III
> ><wli@xxxxxxxxxxxxxx> wrote:
> >
> >
> >>Much the same holds for the atomic_t's; 32 + PAGE_SHIFT is
> >>44 bits or more, about as much as is possible, and one reference per
> >>page per page is not even feasible. Full-length atomic_t's are just
> >>not necessary.
> >>
> >
> >You can overflow a page's refcount by mapping it 4G times. That requires
> >32GB of pagetable memory. It's quite feasible with remap_file_pages().
> >
> But do anybody ever need to do that?
> Such an attack is easily thwarted by refusing to map it more
> than, say 3G times?

That still allows you to DoS the page.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/