Re: Possible deny of service with memfd_create()

2021-02-05 Thread Christian König
Am 05.02.21 um 11:50 schrieb Michal Hocko: On Fri 05-02-21 08:54:31, Christian König wrote: Am 05.02.21 um 01:32 schrieb Hugh Dickins: On Thu, 4 Feb 2021, Michal Hocko wrote: On Thu 04-02-21 17:32:20, Christian Koenig wrote: Hi Michal, as requested in the other mail thread the following

Re: Possible deny of service with memfd_create()

2021-02-05 Thread Michal Hocko
On Fri 05-02-21 11:57:09, Christian König wrote: > Am 05.02.21 um 11:50 schrieb Michal Hocko: > > On Fri 05-02-21 08:54:31, Christian König wrote: > > > Am 05.02.21 um 01:32 schrieb Hugh Dickins: > > > > On Thu, 4 Feb 2021, Michal Hocko wrote: [...] > > > > > The only existing protection right now

Re: Possible deny of service with memfd_create()

2021-02-05 Thread Michal Hocko
On Fri 05-02-21 08:54:31, Christian König wrote: > Am 05.02.21 um 01:32 schrieb Hugh Dickins: > > On Thu, 4 Feb 2021, Michal Hocko wrote: > > > On Thu 04-02-21 17:32:20, Christian Koenig wrote: > > > > Hi Michal, > > > > > > > > as requested in the other mail thread the following sample code gets

Re: Possible deny of service with memfd_create()

2021-02-04 Thread Christian König
Am 05.02.21 um 01:32 schrieb Hugh Dickins: On Thu, 4 Feb 2021, Michal Hocko wrote: On Thu 04-02-21 17:32:20, Christian Koenig wrote: Hi Michal, as requested in the other mail thread the following sample code gets my test system down within seconds. The issue is that the memory allocated for

Re: Possible deny of service with memfd_create()

2021-02-04 Thread Hugh Dickins
On Thu, 4 Feb 2021, Michal Hocko wrote: > On Thu 04-02-21 17:32:20, Christian Koenig wrote: > > Hi Michal, > > > > as requested in the other mail thread the following sample code gets my test > > system down within seconds. > > > > The issue is that the memory allocated for the file descriptor

Re: Possible deny of service with memfd_create()

2021-02-04 Thread Michal Hocko
On Thu 04-02-21 17:32:20, Christian König wrote: > Hi Michal, > > as requested in the other mail thread the following sample code gets my test > system down within seconds. > > The issue is that the memory allocated for the file descriptor is not > accounted to the process allocating it, so the

Possible deny of service with memfd_create()

2021-02-04 Thread Christian König
Hi Michal, as requested in the other mail thread the following sample code gets my test system down within seconds. The issue is that the memory allocated for the file descriptor is not accounted to the process allocating it, so the OOM killer pics whatever process it things is good but