Received: by 2002:a05:6359:c8b:b0:c7:702f:21d4 with SMTP id go11csp1281353rwb; Thu, 22 Sep 2022 12:41:43 -0700 (PDT) X-Google-Smtp-Source: AMsMyM5+iowghBwK5d1uegnnVoj3cHmGWCGRau/mwF9HdU8ZCwO11JAUYPECPGWtCQzUuw3avJjy X-Received: by 2002:a05:6402:d0b:b0:443:df38:9df with SMTP id eb11-20020a0564020d0b00b00443df3809dfmr4886469edb.9.1663875703047; Thu, 22 Sep 2022 12:41:43 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1663875703; cv=none; d=google.com; s=arc-20160816; b=CN0HIONfDllU0svaBNeeraFanus6Jbalx7Fr3em+sfWS2YaVvVpAZ6U/usEUpXOCOD dx96SYOWnFpJ/EO5z1g5ks5v/5R7Ex1eFMtHZEJH5rqTLutxfUke1q0ZWUtA54OPTB0z rUmS1VTy+UYiNGdw3kzGeDje9DKWwnOtw3fK8Dn4dyPWIJCEGXir+hQGLi+T5b2Nu3dK SnVUt5galkBBdmW+/HLNUElknehawPS2UGtn13gofmaR1k0KGzTePPkm8zc9DYfJgvMR 0/+dNmBderDHP4FlPIOUugxqYFPQVy1qLBABxebZ+ivtgDWwg9fVw/5YJx1A6WvAy8Ag EPQQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:subject:cc:to:from:date :dkim-signature; bh=X/MYTAElgeFQeyyYNMs54J+iDpno7z6oHj6MWUmpCvM=; b=T8p8JvSXSb0fltHolUQGiAD7BTDX6hQ3ySGrs2O9l802V/HT/JEkKg2HGBKSpwc/1I 66GP6064Toku4J7r/f0ZhFvIw89VMgbe75FKAm/TMP8wc4JTm6wt6Y6Veo38dTacg9yW n41K6d7lCdTB0ZFuDMIUYFORLwI9PgUhmhmEfyJdqPo1s94giAChzCrtGW4cW4zTYoQg N8IUVdslI7S1biSc1WdlHipyXpLhfwqxryAX5j/SDJAke3B+zygLxUjF3OE1de0WWp+l pQijslD9m3sWHYDjHAIeBx9boeb/pRbeXgGK/u2Io4iwGtQkkh25RpNWF1I92mYVHuk1 22Dw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=YC8ixN8E; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id e15-20020a50d4cf000000b00454232d4204si6045000edj.220.2022.09.22.12.41.22; Thu, 22 Sep 2022 12:41:43 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=YC8ixN8E; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232360AbiIVTkq (ORCPT + 62 others); Thu, 22 Sep 2022 15:40:46 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:33546 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232242AbiIVTko (ORCPT ); Thu, 22 Sep 2022 15:40:44 -0400 Received: from dfw.source.kernel.org (dfw.source.kernel.org [IPv6:2604:1380:4641:c500::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C874C100AAF; Thu, 22 Sep 2022 12:40:42 -0700 (PDT) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id 64EF7637B5; Thu, 22 Sep 2022 19:40:42 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 45829C433C1; Thu, 22 Sep 2022 19:40:40 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1663875641; bh=Iu+ioVZAl++oTxE1oI47t/6oQuwifWn8lmpY1yCr8J4=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=YC8ixN8EP0aZI0e+nDZs91siEij37VrKEmFWG3Ty2t8usgwjVxksauo5Og7qifkq5 ESf2BqmXtU9USNgh+H2YKJEXRWpyu7EDcgicu3AJOn2B/4WayyL94dp8xbokjZvmw2 M56qmrIx+uvo2sUUrQmzfQ5/ucT/pOiWMPHGNcLJ6IIzRCYzVRcutddcWgSvzdbhZM fcZkJSFboZpZl7fu6RLNBgaLlv3gbFkR4ETLqK750bOZ4J5pst6/eAIZH31PhhVZLn QMHkEcQOXS8pXwYt/LtILex4KMGS/VXDhD7XC9erQbOO/ciNySxRd4PP7XyTR4i5Zs 1sdrT7lGqR5Mw== Date: Thu, 22 Sep 2022 12:40:39 -0700 From: Jakub Kicinski To: Kees Cook Cc: Vlastimil Babka , "David S. Miller" , Eric Dumazet , Paolo Abeni , netdev@vger.kernel.org, Greg Kroah-Hartman , Nick Desaulniers , David Rientjes , Pekka Enberg , Joonsoo Kim , Andrew Morton , Alex Elder , Josef Bacik , David Sterba , Sumit Semwal , Christian =?UTF-8?B?S8O2bmln?= , Jesse Brandeburg , Daniel Micay , Yonghong Song , Marco Elver , Miguel Ojeda , Jacob Shin , linux-kernel@vger.kernel.org, linux-mm@kvack.org, linux-btrfs@vger.kernel.org, linux-media@vger.kernel.org, dri-devel@lists.freedesktop.org, linaro-mm-sig@lists.linaro.org, linux-fsdevel@vger.kernel.org, intel-wired-lan@lists.osuosl.org, dev@openvswitch.org, x86@kernel.org, linux-wireless@vger.kernel.org, llvm@lists.linux.dev, linux-hardening@vger.kernel.org Subject: Re: [PATCH 02/12] skbuff: Proactively round up to kmalloc bucket size Message-ID: <20220922124039.688be0b8@kernel.org> In-Reply-To: <20220922031013.2150682-3-keescook@chromium.org> References: <20220922031013.2150682-1-keescook@chromium.org> <20220922031013.2150682-3-keescook@chromium.org> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-7.1 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org On Wed, 21 Sep 2022 20:10:03 -0700 Kees Cook wrote: > diff --git a/net/core/skbuff.c b/net/core/skbuff.c > index 974bbbbe7138..4fe4c7544c1d 100644 > --- a/net/core/skbuff.c > +++ b/net/core/skbuff.c > @@ -427,14 +427,15 @@ struct sk_buff *__alloc_skb(unsigned int size, gfp_t gfp_mask, > */ > size = SKB_DATA_ALIGN(size); > size += SKB_DATA_ALIGN(sizeof(struct skb_shared_info)); > - data = kmalloc_reserve(size, gfp_mask, node, &pfmemalloc); > - if (unlikely(!data)) > - goto nodata; > - /* kmalloc(size) might give us more room than requested. > + /* kmalloc(size) might give us more room than requested, so > + * allocate the true bucket size up front. > * Put skb_shared_info exactly at the end of allocated zone, > * to allow max possible filling before reallocation. > */ > - osize = ksize(data); > + osize = kmalloc_size_roundup(size); > + data = kmalloc_reserve(osize, gfp_mask, node, &pfmemalloc); > + if (unlikely(!data)) > + goto nodata; > size = SKB_WITH_OVERHEAD(osize); > prefetchw(data + size); I'd rename osize here to alloc_size for consistency but one could argue either way :) Acked-by: Jakub Kicinski