Re: [Devel] double faults in Virtuozzo KVM

2017-09-28 Thread Denis Kirjanov
On Thursday, September 28, 2017, Roman Kagan wrote: > On Thu, Sep 28, 2017 at 05:55:51PM +0300, Denis Kirjanov wrote: > > Hi, we're seeing double faults in async_page_fault. > > async_page_fault is the #PF handler in KVM guests. It filters out > specially crafted #PF's

Re: [Devel] double faults in Virtuozzo KVM

2017-09-28 Thread Vasily Averin
Dear Denis, no, we know nothing about this problem. Could you please create bug in opnevz jira? Thank you, Vasily Averin On 2017-09-28 17:55, Denis Kirjanov wrote: > Hi, we're seeing double faults in async_page_fault. > _Some_ of them related to the fact that during the faults RSP points

[Devel] double faults in Virtuozzo KVM

2017-09-28 Thread Denis Kirjanov
Hi, we're seeing double faults in async_page_fault. _Some_ of them related to the fact that during the faults RSP points to userspace and it leads to double-fault scenario. Is it known problem? Thanks! [11587.895394] Hardware name: Virtuozzo KVM, BIOS 1.9.1-5.3.2.vz7.6 04/01/2014 [11587.895394]

[Devel] [PATCH rh7] ms/mm: mempool: kasan: don't poot mempool objects in quarantine

2017-09-28 Thread Andrey Ryabinin
Currently we may put reserved by mempool elements into quarantine via kasan_kfree(). This is totally wrong since quarantine may really free these objects. So when mempool will try to use such element, use-after-free will happen. Or mempool may decide that it no longer need that element and

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Kirill Tkhai
The oldest version from VZ7, I suppose. I don't know which it is. On 28.09.2017 13:58, Stanislav Kinsburskiy wrote: > How old should it be? > I checked with v1.4.21 > > 28.09.2017 12:55, Kirill Tkhai пишет: >> Could you please to say will it work on old iptables? >> >> On 28.09.2017 13:03,

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Stanislav Kinsburskiy
How old should it be? I checked with v1.4.21 28.09.2017 12:55, Kirill Tkhai пишет: > Could you please to say will it work on old iptables? > > On 28.09.2017 13:03, Stanislav Kinsburskiy wrote: >> What a brilliant idea it was to ignore unknown keys. >> Should take it into account. >> >>

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Kirill Tkhai
Could you please to say will it work on old iptables? On 28.09.2017 13:03, Stanislav Kinsburskiy wrote: > What a brilliant idea it was to ignore unknown keys. > Should take it into account. > > 28.09.2017 10:26, Vasily Averin пишет: >> kthai@ explained that old version of iptables ignores

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Kirill Tkhai
iptables-restore does ignore them. On 28.09.2017 11:26, Vasily Averin wrote: > kthai@ explained that old version of iptables ignores unknown keys, so adding > -w is safe. > > On 2017-09-28 10:40, Pavel Tikhomirov wrote: >> Can we have these script running with older iptables version which does

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Stanislav Kinsburskiy
What a brilliant idea it was to ignore unknown keys. Should take it into account. 28.09.2017 10:26, Vasily Averin пишет: > kthai@ explained that old version of iptables ignores unknown keys, so adding > -w is safe. > > On 2017-09-28 10:40, Pavel Tikhomirov wrote: >> Can we have these script

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Vasily Averin
kthai@ explained that old version of iptables ignores unknown keys, so adding -w is safe. On 2017-09-28 10:40, Pavel Tikhomirov wrote: > Can we have these script running with older iptables version which does not > have "-w"? > > On 09/27/2017 02:11 PM, Stanislav Kinsburskiy wrote: >> Neede to

Re: [Devel] [PATCH] scripts: add "-w" to iptables command

2017-09-28 Thread Pavel Tikhomirov
Can we have these script running with older iptables version which does not have "-w"? On 09/27/2017 02:11 PM, Stanislav Kinsburskiy wrote: Neede to support new versions of iptables. https://jira.sw.ru/browse/PSBM-73153 Signed-off-by: Stanislav Kinsburskiy ---