lkml.org 
[lkml]   [2022]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 5.17 109/111] random: check for signals after page of pool writes
    Date
    From: "Jason A. Donenfeld" <Jason@zx2c4.com>

    commit 1ce6c8d68f8ac587f54d0a271ac594d3d51f3efb upstream.

    get_random_bytes_user() checks for signals after producing a PAGE_SIZE
    worth of output, just like /dev/zero does. write_pool() is doing
    basically the same work (actually, slightly more expensive), and so
    should stop to check for signals in the same way. Let's also name it
    write_pool_user() to match get_random_bytes_user(), so this won't be
    misused in the future.

    Before this patch, massive writes to /dev/urandom would tie up the
    process for an extremely long time and make it unterminatable. After, it
    can be successfully interrupted. The following test program can be used
    to see this works as intended:

    #include <unistd.h>
    #include <fcntl.h>
    #include <signal.h>
    #include <stdio.h>

    static unsigned char x[~0U];

    static void handle(int) { }

    int main(int argc, char *argv[])
    {
    pid_t pid = getpid(), child;
    int fd;
    signal(SIGUSR1, handle);
    if (!(child = fork())) {
    for (;;)
    kill(pid, SIGUSR1);
    }
    fd = open("/dev/urandom", O_WRONLY);
    pause();
    printf("interrupted after writing %zd bytes\n", write(fd, x, sizeof(x)));
    close(fd);
    kill(child, SIGTERM);
    return 0;
    }

    Result before: "interrupted after writing 2147479552 bytes"
    Result after: "interrupted after writing 4096 bytes"

    Cc: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    ---
    drivers/char/random.c | 14 ++++++++++----
    1 file changed, 10 insertions(+), 4 deletions(-)

    --- a/drivers/char/random.c
    +++ b/drivers/char/random.c
    @@ -1253,7 +1253,7 @@ static __poll_t random_poll(struct file
    return crng_ready() ? EPOLLIN | EPOLLRDNORM : EPOLLOUT | EPOLLWRNORM;
    }

    -static ssize_t write_pool(struct iov_iter *iter)
    +static ssize_t write_pool_user(struct iov_iter *iter)
    {
    u8 block[BLAKE2S_BLOCK_SIZE];
    ssize_t ret = 0;
    @@ -1268,7 +1268,13 @@ static ssize_t write_pool(struct iov_ite
    mix_pool_bytes(block, copied);
    if (!iov_iter_count(iter) || copied != sizeof(block))
    break;
    - cond_resched();
    +
    + BUILD_BUG_ON(PAGE_SIZE % sizeof(block) != 0);
    + if (ret % PAGE_SIZE == 0) {
    + if (signal_pending(current))
    + break;
    + cond_resched();
    + }
    }

    memzero_explicit(block, sizeof(block));
    @@ -1277,7 +1283,7 @@ static ssize_t write_pool(struct iov_ite

    static ssize_t random_write_iter(struct kiocb *kiocb, struct iov_iter *iter)
    {
    - return write_pool(iter);
    + return write_pool_user(iter);
    }

    static ssize_t urandom_read_iter(struct kiocb *kiocb, struct iov_iter *iter)
    @@ -1344,7 +1350,7 @@ static long random_ioctl(struct file *f,
    ret = import_single_range(WRITE, p, len, &iov, &iter);
    if (unlikely(ret))
    return ret;
    - ret = write_pool(&iter);
    + ret = write_pool_user(&iter);
    if (unlikely(ret < 0))
    return ret;
    /* Since we're crediting, enforce that it was all written into the pool. */

    \
     
     \ /
      Last update: 2022-05-27 13:58    [W:4.176 / U:0.188 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site