Re: Users locking memory using futexes

Rusty Russell (rusty@rustcorp.com.au)
Wed, 13 Nov 2002 05:13:35 +1100


In message <1037124384.8321.70.camel@irongate.swansea.linux.org.uk> you write:
> On Tue, 2002-11-12 at 17:17, Rusty Russell wrote:
> > > Ouch! It looks to me like userspace can use FUTEX_FD to lock many
> > > pages of memory, achieving the same as mlock() but without the
> > > resource checks.
> > >
> > > Denial of service attack?
> >
> > See "pipe".
>
> Thats not an excuse. If the futex stuff allows arbitary memory locking
> and it isnt properly accounted then its a bug, with the added problem
> that its easier to havie nasty accidents with than pipes.

It's bounded by one page per fd. If you want better than that, then
yes we'll need to thihk harder.

Frobbing futexes on COW and page-in/out is a possible solution, but
requires careful thought.

Rusty.

--
  Anyone who quotes me in their sig is an idiot. -- Rusty Russell.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/