Re: Possible deny of service with memfd_create()

2021-02-05 Thread Christian König
Am 05.02.21 um 11:50 schrieb Michal Hocko: On Fri 05-02-21 08:54:31, Christian König wrote: Am 05.02.21 um 01:32 schrieb Hugh Dickins: On Thu, 4 Feb 2021, Michal Hocko wrote: On Thu 04-02-21 17:32:20, Christian Koenig wrote: Hi Michal, as requested in the other mail thread the following samp

Re: Possible deny of service with memfd_create()

2021-02-05 Thread Michal Hocko
On Fri 05-02-21 11:57:09, Christian König wrote: > Am 05.02.21 um 11:50 schrieb Michal Hocko: > > On Fri 05-02-21 08:54:31, Christian König wrote: > > > Am 05.02.21 um 01:32 schrieb Hugh Dickins: > > > > On Thu, 4 Feb 2021, Michal Hocko wrote: [...] > > > > > The only existing protection right now

Re: Possible deny of service with memfd_create()

2021-02-05 Thread Michal Hocko
On Fri 05-02-21 08:54:31, Christian König wrote: > Am 05.02.21 um 01:32 schrieb Hugh Dickins: > > On Thu, 4 Feb 2021, Michal Hocko wrote: > > > On Thu 04-02-21 17:32:20, Christian Koenig wrote: > > > > Hi Michal, > > > > > > > > as requested in the other mail thread the following sample code gets

Re: Possible deny of service with memfd_create()

2021-02-04 Thread Christian König
Am 05.02.21 um 01:32 schrieb Hugh Dickins: On Thu, 4 Feb 2021, Michal Hocko wrote: On Thu 04-02-21 17:32:20, Christian Koenig wrote: Hi Michal, as requested in the other mail thread the following sample code gets my test system down within seconds. The issue is that the memory allocated for t

Re: Possible deny of service with memfd_create()

2021-02-04 Thread Hugh Dickins
On Thu, 4 Feb 2021, Michal Hocko wrote: > On Thu 04-02-21 17:32:20, Christian Koenig wrote: > > Hi Michal, > > > > as requested in the other mail thread the following sample code gets my test > > system down within seconds. > > > > The issue is that the memory allocated for the file descriptor is

Re: Possible deny of service with memfd_create()

2021-02-04 Thread Michal Hocko
On Thu 04-02-21 17:32:20, Christian König wrote: > Hi Michal, > > as requested in the other mail thread the following sample code gets my test > system down within seconds. > > The issue is that the memory allocated for the file descriptor is not > accounted to the process allocating it, so the O

Possible deny of service with memfd_create()

2021-02-04 Thread Christian König
Hi Michal, as requested in the other mail thread the following sample code gets my test system down within seconds. The issue is that the memory allocated for the file descriptor is not accounted to the process allocating it, so the OOM killer pics whatever process it things is good but neve