Zach O'Keefe 16b1025eaa mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again ... commit 9319b64790 upstream. (struct dirty_throttle_control *)->thresh is an unsigned long, but is passed as the u32 divisor argument to div_u64(). On architectures where unsigned long is 64 bytes, the argument will be implicitly truncated. Use div64_u64() instead of div_u64() so that the value used in the "is this a safe division" check is the same as the divisor. Also, remove redundant cast of the numerator to u64, as that should happen implicitly. This would be difficult to exploit in memcg domain, given the ratio-based arithmetic domain_drity_limits() uses, but is much easier in global writeback domain with a BDI_CAP_STRICTLIMIT-backing device, using e.g. vm.dirty_bytes=(1<<32)*PAGE_SIZE so that dtc->thresh == (1<<32) Link: https://lkml.kernel.org/r/20240118181954.1415197-1-zokeefe@google.com Fixes: f6789593d5 ("mm/page-writeback.c: fix divide by zero in bdi_dirty_limits()") Signed-off-by: Zach O'Keefe <zokeefe@google.com> Cc: Maxim Patlasov <MPatlasov@parallels.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-02-23 09:12:32 +01:00
..
damon	mm/damon/core: make damon_start() waits until kdamond_fn() starts	2024-01-01 12:39:08 +00:00
kasan	kasan: disable kasan_non_canonical_hook() for HW tags	2024-01-01 12:38:52 +00:00
kfence	mm,kfence: decouple kfence from page granularity mapping judgement	2023-12-03 07:32:08 +01:00
kmsan	mm: kmsan: handle alloc failures in kmsan_vmap_pages_range_noflush()	2023-04-26 14:28:41 +02:00
backing-dev.c	writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs	2023-04-26 14:28:39 +02:00
balloon_compaction.c	mm: Convert all PageMovable users to movable_operations	2022-08-02 12:34:03 -04:00
bootmem_info.c	bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem	2022-08-28 14:02:45 -07:00
cma.c	mm/cma: use nth_page() in place of direct struct page manipulation	2023-11-28 17:07:14 +00:00
cma.h
cma_debug.c	mm/cma_debug: show complete cma name in debugfs directories	2022-09-11 20:25:50 -07:00
cma_sysfs.c
compaction.c	Revert "mm/compaction: fix set skip in fast_find_migrateblock"	2023-02-01 08:34:49 +01:00
debug.c	mm: remove the vma linked list	2022-09-26 19:46:26 -07:00
debug_page_ref.c
debug_vm_pgtable.c	docs: rename Documentation/vm to Documentation/mm	2022-06-27 12:52:53 -07:00
dmapool.c
early_ioremap.c
fadvise.c
failslab.c	mm: fix unexpected changes to {failslab|fail_page_alloc}.attr	2022-11-22 18:50:44 -08:00
filemap.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
folio-compat.c	mm: remove try_to_free_swap()	2022-10-03 14:02:53 -07:00
frontswap.c	frontswap: don't call ->init if no ops are registered	2022-09-26 12:14:34 -07:00
gup.c	mm: always expand the stack with the mmap write lock held	2023-07-01 13:16:25 +02:00
gup_test.c	mm: rename is_pinnable_page() to is_longterm_pinnable_page()	2022-07-17 17:14:27 -07:00
gup_test.h
highmem.c	highmem: fix kmap_to_page() for kmap_local_page() addresses	2022-10-12 18:51:51 -07:00
hmm.c	mm/swap: add swp_offset_pfn() to fetch PFN from swap entry	2022-09-26 19:46:05 -07:00
huge_memory.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
hugetlb.c	hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write	2023-12-13 18:39:20 +01:00
hugetlb_cgroup.c	hugetlb_cgroup: use helper for_each_hstate and hstate_index	2022-09-11 20:25:53 -07:00
hugetlb_vmemmap.c	mm: hugetlb_vmemmap: fix a race between vmemmap pmd split	2023-09-19 12:27:56 +02:00
hugetlb_vmemmap.h	mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability	2022-08-08 18:06:43 -07:00
hwpoison-inject.c	mm/hwpoison: add __init/__exit annotations to module init/exit funcs	2022-10-03 14:03:05 -07:00
init-mm.c	mm: remove rb tree.	2022-09-26 19:46:16 -07:00
internal.h	mm, netfs, fscache: stop read optimisation when folio removed from pagecache	2024-01-10 17:10:31 +01:00
interval_tree.c
io-mapping.c
ioremap.c	mm: ioremap: Add ioremap/iounmap_allowed()	2022-06-27 12:22:31 +01:00
Kconfig	mm: introduce new 'lock_mm_and_find_vma()' page fault helper	2023-07-01 13:16:24 +02:00
Kconfig.debug	mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM	2023-06-14 11:15:29 +02:00
khugepaged.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
kmemleak.c	mm/kmemleak: prevent soft lockup in kmemleak_scan()'s object iteration loops	2022-10-28 13:37:22 -07:00
ksm.c	mm/ksm: fix race with VMA iteration and mm_struct teardown	2023-03-30 12:49:29 +02:00
list_lru.c	mm: kmem: make mem_cgroup_from_obj() vmalloc()-safe	2022-06-16 19:48:31 -07:00
maccess.c	mm: Fix copy_from_user_nofault().	2023-06-28 11:12:17 +02:00
madvise.c	madvise:madvise_free_pte_range(): don't use mapcount() against large folio for sharing check	2023-08-30 16:11:11 +02:00
Makefile	mm: memcontrol: drop dead CONFIG_MEMCG_SWAP config symbol	2022-10-03 14:03:36 -07:00
mapping_dirty_helpers.c
memblock.c	Revert "mm: Always release pages to the buddy allocator in memblock_free_late()."	2023-02-22 12:59:50 +01:00
memcontrol.c	mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors	2023-11-28 17:07:20 +00:00
memfd.c	memfd: check for non-NULL file_seals in memfd_create() syscall	2023-06-28 11:12:27 +02:00
memory-failure.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
memory-tiers.c	memory tier: release the new_memtier in find_create_memory_tier()	2023-03-10 09:34:27 +01:00
memory.c	mm: fix unmap_mapping_range high bits shift bug	2024-01-10 17:10:35 +01:00
memory_hotplug.c	mm/memory_hotplug: fix error handling in add_memory_resource()	2024-01-10 17:10:33 +01:00
mempolicy.c	mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer	2023-11-08 14:11:02 +01:00
mempool.c
memremap.c	mm/memremap.c: map FS_DAX device memory as decrypted	2022-11-08 15:57:23 -08:00
memtest.c
migrate.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
migrate_device.c	mm/migrate_device: return number of migrating pages in args->cpages	2022-11-22 18:50:43 -08:00
mincore.c	mm: teach mincore_hugetlb about pte markers	2023-03-22 13:34:03 +01:00
mlock.c	mm/mlock: drop dead code in count_mm_mlocked_page_nr()	2022-09-26 19:46:27 -07:00
mm_init.c	mm: multi-gen LRU: groundwork	2022-09-26 19:46:09 -07:00
mm_slot.h	mm: introduce common struct mm_slot	2022-10-03 14:02:43 -07:00
mmap.c	mmap: fix error paths with dup_anon_vma()	2023-11-08 14:11:03 +01:00
mmap_lock.c
mmu_gather.c	mm/khugepaged: fix GUP-fast interaction by sending IPI	2022-11-30 14:49:42 -08:00
mmu_notifier.c
mmzone.c	mm: multi-gen LRU: groundwork	2022-09-26 19:46:09 -07:00
mprotect.c	mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in	2022-10-12 15:56:46 -07:00
mremap.c	mm, mremap: fix mremap() expanding for vma's with vm_ops->close()	2023-02-09 11:28:22 +01:00
msync.c	mm/msync: use vma_find() instead of vma linked list	2022-09-26 19:46:25 -07:00
nommu.c	xtensa: fix lock_mm_and_find_vma in case VMA not found	2023-07-05 18:27:37 +01:00
oom_kill.c	mm: reduce noise in show_mem for lowmem allocations	2022-09-26 19:46:29 -07:00
page-writeback.c	mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again	2024-02-23 09:12:32 +01:00
page_alloc.c	mm: page_alloc: unreserve highatomic page blocks before oom	2024-01-31 16:17:03 -08:00
page_counter.c	mm: page_counter: remove unneeded atomic ops for low/min	2022-09-11 20:26:01 -07:00
page_ext.c	mm/page_exit: fix kernel doc warning in page_ext_put()	2022-11-22 18:50:41 -08:00
page_idle.c
page_io.c	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
page_isolation.c	mm/page_isolation: fix clang deadcode warning	2022-10-28 13:37:22 -07:00
page_owner.c	mm: reuse pageblock_start/end_pfn() macro	2022-10-03 14:03:03 -07:00
page_poison.c
page_reporting.c
page_reporting.h
page_table_check.c	mm: page_table_check: Ensure user pages are not slab pages	2023-06-14 11:15:29 +02:00
page_vma_mapped.c	mm/swap: add swp_offset_pfn() to fetch PFN from swap entry	2022-09-26 19:46:05 -07:00
pagewalk.c	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
percpu-internal.h
percpu-km.c
percpu-stats.c
percpu-vm.c
percpu.c	mm: percpu: use kmemleak_ignore_phys() instead of kmemleak_free()	2022-07-17 17:14:47 -07:00
pgalloc-track.h
pgtable-generic.c
process_vm_access.c	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
ptdump.c	mm: pagewalk: Fix race between unmap and page walker	2022-09-03 10:13:13 -07:00
readahead.c	vfs: fix readahead(2) on block devices	2023-11-20 11:51:50 +01:00
rmap.c	mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON	2023-03-10 09:34:25 +01:00
rodata_test.c	mm/rodata_test: use PAGE_ALIGNED() helper	2022-10-03 14:03:05 -07:00
secretmem.c	mm/secretmem: remove reduntant return value	2022-10-03 14:03:36 -07:00
shmem.c	mm/shmem: fix race in shmem_undo_range w/THP	2023-12-20 17:00:26 +01:00
shrinker_debug.c	mm: shrinkers: fix deadlock in shrinker debugfs	2023-02-22 12:59:46 +01:00
shuffle.c	mm/shuffle: convert module_param_call to module_param_cb	2022-10-03 14:03:07 -07:00
shuffle.h
slab.c	mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP	2023-03-30 12:49:23 +02:00
slab.h	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
slab_common.c	mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()	2023-10-06 14:57:03 +02:00
slob.c	Merge branch 'slab/for-6.1/kmalloc_size_roundup' into slab/for-next	2022-09-29 11:30:55 +02:00
slub.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
sparse-vmemmap.c	mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c	2022-08-08 18:06:42 -07:00
sparse.c	mm/sparsemem: fix race in accessing memory_section->usage	2024-01-31 16:17:02 -08:00
swap.c	mm: add folio_add_lru_vma()	2022-10-03 14:02:45 -07:00
swap.h	mm: remove lookup_swap_cache()	2022-10-03 14:02:51 -07:00
swap_cgroup.c	mm: memcontrol: don't allocate cgroup swap arrays when memcg is disabled	2022-10-03 14:03:36 -07:00
swap_slots.c	mm/swap: convert put_swap_page() to put_swap_folio()	2022-10-03 14:02:46 -07:00
swap_state.c	swap_state: convert free_swap_cache() to use a folio	2022-10-03 14:02:51 -07:00
swapfile.c	mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()	2023-04-13 16:55:36 +02:00
truncate.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
usercopy.c	mm: Fix copy_from_user_nofault().	2023-06-28 11:12:17 +02:00
userfaultfd.c	mm/shmem: use page_mapping() to detect page cache for uffd continue	2022-11-08 15:57:23 -08:00
util.c	rcu: dump vmalloc memory info safely	2023-09-13 09:42:59 +02:00
vmalloc.c	mm/vmalloc: add a safer version of find_vm_area() for debug	2023-09-13 09:43:00 +02:00
vmpressure.c	net-memcg: Fix scope of sockmem pressure indicators	2023-09-13 09:42:33 +02:00
vmscan.c	mm: merge folio_has_private()/filemap_release_folio() call pairs	2024-01-10 17:10:31 +01:00
vmstat.c	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
workingset.c	mm/mglru: fix underprotected page cache	2023-12-20 17:00:26 +01:00
z3fold.c	mm: Convert all PageMovable users to movable_operations	2022-08-02 12:34:03 -04:00
zbud.c
zpool.c
zsmalloc.c	zsmalloc: allow only one active pool compaction context	2023-08-23 17:52:40 +02:00
zswap.c	zswap: do not shrink if cgroup may not zswap	2023-06-21 16:00:54 +02:00