linux-toradex.git/net/ceph/crypto.c, branch v4.9.14

libceph: stop allocating a new cipher on every crypto request

2017-01-26T07:24:46+00:00

commit 7af3ea189a9a13f090de51c97f676215dabc1205 upstream.

This is useless and more importantly not allowed on the writeback path,
because crypto_alloc_skcipher() allocates memory with GFP_KERNEL, which
can recurse back into the filesystem:

    kworker/9:3     D ffff92303f318180     0 20732      2 0x00000080
    Workqueue: ceph-msgr ceph_con_workfn [libceph]
     ffff923035dd4480 ffff923038f8a0c0 0000000000000001 000000009eb27318
     ffff92269eb28000 ffff92269eb27338 ffff923036b145ac ffff923035dd4480
     00000000ffffffff ffff923036b145b0 ffffffff951eb4e1 ffff923036b145a8
    Call Trace:
     [] ? schedule+0x31/0x80
     [] ? schedule_preempt_disabled+0xa/0x10
     [] ? __mutex_lock_slowpath+0xb4/0x130
     [] ? mutex_lock+0x1b/0x30
     [] ? xfs_reclaim_inodes_ag+0x233/0x2d0 [xfs]
     [] ? move_active_pages_to_lru+0x125/0x270
     [] ? radix_tree_gang_lookup_tag+0xc5/0x1c0
     [] ? __list_lru_walk_one.isra.3+0x33/0x120
     [] ? xfs_reclaim_inodes_nr+0x31/0x40 [xfs]
     [] ? super_cache_scan+0x17e/0x190
     [] ? shrink_slab.part.38+0x1e3/0x3d0
     [] ? shrink_node+0x10a/0x320
     [] ? do_try_to_free_pages+0xf4/0x350
     [] ? try_to_free_pages+0xea/0x1b0
     [] ? __alloc_pages_nodemask+0x61d/0xe60
     [] ? cache_grow_begin+0x9d/0x560
     [] ? fallback_alloc+0x148/0x1c0
     [] ? __crypto_alloc_tfm+0x37/0x130
     [] ? __kmalloc+0x1eb/0x580
     [] ? crush_choose_firstn+0x3eb/0x470 [libceph]
     [] ? __crypto_alloc_tfm+0x37/0x130
     [] ? crypto_spawn_tfm+0x39/0x60
     [] ? crypto_cbc_init_tfm+0x23/0x40 [cbc]
     [] ? __crypto_alloc_tfm+0xcc/0x130
     [] ? crypto_skcipher_init_tfm+0x113/0x180
     [] ? crypto_create_tfm+0x43/0xb0
     [] ? crypto_larval_lookup+0x150/0x150
     [] ? crypto_alloc_tfm+0x72/0x120
     [] ? ceph_aes_encrypt2+0x67/0x400 [libceph]
     [] ? ceph_pg_to_up_acting_osds+0x84/0x5b0 [libceph]
     [] ? release_sock+0x40/0x90
     [] ? tcp_recvmsg+0x4b4/0xae0
     [] ? ceph_encrypt2+0x54/0xc0 [libceph]
     [] ? ceph_x_encrypt+0x5d/0x90 [libceph]
     [] ? calcu_signature+0x5f/0x90 [libceph]
     [] ? ceph_x_sign_message+0x35/0x50 [libceph]
     [] ? prepare_write_message_footer+0x5c/0xa0 [libceph]
     [] ? ceph_con_workfn+0x2258/0x2dd0 [libceph]
     [] ? queue_con_delay+0x33/0xd0 [libceph]
     [] ? __submit_request+0x20d/0x2f0 [libceph]
     [] ? ceph_osdc_start_request+0x28/0x30 [libceph]
     [] ? rbd_queue_workfn+0x2f3/0x350 [rbd]
     [] ? process_one_work+0x160/0x410
     [] ? worker_thread+0x4d/0x480
     [] ? process_one_work+0x410/0x410
     [] ? kthread+0xcd/0xf0
     [] ? ret_from_fork+0x1f/0x40
     [] ? kthread_create_on_node+0x190/0x190

Allocating the cipher along with the key fixes the issue - as long the
key doesn't change, a single cipher context can be used concurrently in
multiple requests.

We still can't take that GFP_KERNEL allocation though.  Both
ceph_crypto_key_clone() and ceph_crypto_key_decode() are called from
GFP_NOFS context, so resort to memalloc_noio_{save,restore}() here.

Reported-by: Lucas Stach 
Signed-off-by: Ilya Dryomov 
Reviewed-by: Sage Weil 
Signed-off-by: Greg Kroah-Hartman

libceph: uninline ceph_crypto_key_destroy()

2017-01-26T07:24:46+00:00

commit 6db2304aabb070261ad34923bfd83c43dfb000e3 upstream.

Signed-off-by: Ilya Dryomov 
Reviewed-by: Sage Weil 
Signed-off-by: Greg Kroah-Hartman

libceph: make sure ceph_aes_crypt() IV is aligned

2017-01-26T07:24:43+00:00

commit 124f930b8cbc4ac11236e6eb1c5f008318864588 upstream.

... otherwise the crypto stack will align it for us with a GFP_ATOMIC
allocation and a memcpy() -- see skcipher_walk_first().

Signed-off-by: Ilya Dryomov 
Signed-off-by: Greg Kroah-Hartman

libceph: remove now unused ceph_{en,de}crypt() functions

2017-01-26T07:24:42+00:00

commit 2b1e1a7cd0a615d57455567a549f9965023321b5 upstream.

Signed-off-by: Ilya Dryomov 
Reviewed-by: Sage Weil 
Signed-off-by: Greg Kroah-Hartman

libceph: introduce ceph_crypt() for in-place en/decryption

2017-01-26T07:24:41+00:00

commit a45f795c65b479b4ba107b6ccde29b896d51ee98 upstream.

Starting with 4.9, kernel stacks may be vmalloced and therefore not
guaranteed to be physically contiguous; the new CONFIG_VMAP_STACK
option is enabled by default on x86.  This makes it invalid to use
on-stack buffers with the crypto scatterlist API, as sg_set_buf()
expects a logical address and won't work with vmalloced addresses.

There isn't a different (e.g. kvec-based) crypto API we could switch
net/ceph/crypto.c to and the current scatterlist.h API isn't getting
updated to accommodate this use case.  Allocating a new header and
padding for each operation is a non-starter, so do the en/decryption
in-place on a single pre-assembled (header + data + padding) heap
buffer.  This is explicitly supported by the crypto API:

    "... the caller may provide the same scatter/gather list for the
     plaintext and cipher text. After the completion of the cipher
     operation, the plaintext data is replaced with the ciphertext data
     in case of an encryption and vice versa for a decryption."

Signed-off-by: Ilya Dryomov 
Reviewed-by: Sage Weil 
Signed-off-by: Greg Kroah-Hartman

libceph: Remove unnecessary ivsize variables

2016-01-27T12:36:25+00:00

This patch removes the unnecessary ivsize variabls as they always
have the value of AES_BLOCK_SIZE.

Signed-off-by: Ilya Dryomov 
Signed-off-by: Herbert Xu

libceph: Use skcipher

2016-01-27T12:36:05+00:00

This patch replaces uses of blkcipher with skcipher.

Signed-off-by: Herbert Xu

KEYS: Merge the type-specific data with the payload data

2015-10-21T14:18:36+00:00

Merge the type-specific data with the payload data into one four-word chunk
as it seems pointless to keep them separate.

Use user_key_payload() for accessing the payloads of overloaded
user-defined keys.

Signed-off-by: David Howells 
cc: linux-cifs@vger.kernel.org
cc: ecryptfs@vger.kernel.org
cc: linux-ext4@vger.kernel.org
cc: linux-f2fs-devel@lists.sourceforge.net
cc: linux-nfs@vger.kernel.org
cc: ceph-devel@vger.kernel.org
cc: linux-ima-devel@lists.sourceforge.net

libceph: remove the unused macro AES_KEY_SIZE

2015-09-08T20:14:28+00:00

This removes the no longer used macro AES_KEY_SIZE as no functions use
this macro anymore and thus this macro can be removed due it no longer
being required.

Signed-off-by: Nicholas Krause 
Signed-off-by: Ilya Dryomov

libceph: do not crash on large auth tickets

2014-11-13T19:21:12+00:00

Large (greater than 32k, the value of PAGE_ALLOC_COSTLY_ORDER) auth
tickets will have their buffers vmalloc'ed, which leads to the
following crash in crypto:

[   28.685082] BUG: unable to handle kernel paging request at ffffeb04000032c0
[   28.686032] IP: [] scatterwalk_pagedone+0x22/0x80
[   28.686032] PGD 0
[   28.688088] Oops: 0000 [#1] PREEMPT SMP
[   28.688088] Modules linked in:
[   28.688088] CPU: 0 PID: 878 Comm: kworker/0:2 Not tainted 3.17.0-vm+ #305
[   28.688088] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007
[   28.688088] Workqueue: ceph-msgr con_work
[   28.688088] task: ffff88011a7f9030 ti: ffff8800d903c000 task.ti: ffff8800d903c000
[   28.688088] RIP: 0010:[]  [] scatterwalk_pagedone+0x22/0x80
[   28.688088] RSP: 0018:ffff8800d903f688  EFLAGS: 00010286
[   28.688088] RAX: ffffeb04000032c0 RBX: ffff8800d903f718 RCX: ffffeb04000032c0
[   28.688088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8800d903f750
[   28.688088] RBP: ffff8800d903f688 R08: 00000000000007de R09: ffff8800d903f880
[   28.688088] R10: 18df467c72d6257b R11: 0000000000000000 R12: 0000000000000010
[   28.688088] R13: ffff8800d903f750 R14: ffff8800d903f8a0 R15: 0000000000000000
[   28.688088] FS:  00007f50a41c7700(0000) GS:ffff88011fc00000(0000) knlGS:0000000000000000
[   28.688088] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[   28.688088] CR2: ffffeb04000032c0 CR3: 00000000da3f3000 CR4: 00000000000006b0
[   28.688088] Stack:
[   28.688088]  ffff8800d903f698 ffffffff81392ca8 ffff8800d903f6e8 ffffffff81395d32
[   28.688088]  ffff8800dac96000 ffff880000000000 ffff8800d903f980 ffff880119b7e020
[   28.688088]  ffff880119b7e010 0000000000000000 0000000000000010 0000000000000010
[   28.688088] Call Trace:
[   28.688088]  [] scatterwalk_done+0x38/0x40
[   28.688088]  [] scatterwalk_done+0x38/0x40
[   28.688088]  [] blkcipher_walk_done+0x182/0x220
[   28.688088]  [] crypto_cbc_encrypt+0x15f/0x180
[   28.688088]  [] ? crypto_aes_set_key+0x30/0x30
[   28.688088]  [] ceph_aes_encrypt2+0x29c/0x2e0
[   28.688088]  [] ceph_encrypt2+0x93/0xb0
[   28.688088]  [] ceph_x_encrypt+0x4a/0x60
[   28.688088]  [] ? ceph_buffer_new+0x5d/0xf0
[   28.688088]  [] ceph_x_build_authorizer.isra.6+0x297/0x360
[   28.688088]  [] ? kmem_cache_alloc_trace+0x11b/0x1c0
[   28.688088]  [] ? ceph_auth_create_authorizer+0x36/0x80
[   28.688088]  [] ceph_x_create_authorizer+0x63/0xd0
[   28.688088]  [] ceph_auth_create_authorizer+0x54/0x80
[   28.688088]  [] get_authorizer+0x80/0xd0
[   28.688088]  [] prepare_write_connect+0x18b/0x2b0
[   28.688088]  [] try_read+0x1e59/0x1f10

This is because we set up crypto scatterlists as if all buffers were
kmalloc'ed.  Fix it.

Cc: stable@vger.kernel.org
Signed-off-by: Ilya Dryomov 
Reviewed-by: Sage Weil