Commit c9e664f1 authored by Rafael J. Wysocki's avatar Rafael J. Wysocki
Browse files

PM / Hibernate: Fix memory corruption related to swap 



There is a problem that swap pages allocated before the creation of
a hibernation image can be released and used for storing the contents
of different memory pages while the image is being saved.  Since the
kernel stored in the image doesn't know of that, it causes memory
corruption to occur after resume from hibernation, especially on
systems with relatively small RAM that need to swap often.

This issue can be addressed by keeping the GFP_IOFS bits clear
in gfp_allowed_mask during the entire hibernation, including the
saving of the image, until the system is finally turned off or
the hibernation is aborted.  Unfortunately, for this purpose
it's necessary to rework the way in which the hibernate and
suspend code manipulates gfp_allowed_mask.

This change is based on an earlier patch from Hugh Dickins.

Signed-off-by: default avatarRafael J. Wysocki <rjw@sisk.pl>
Reported-by: default avatarOndrej Zary <linux@rainbow-software.org>
Acked-by: default avatarHugh Dickins <hughd@google.com>
Reviewed-by: default avatarKAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
Cc: stable@kernel.org
parent 9f339caf

include/linux/gfp.h

+2 −2
Original line number Diff line number Diff line
@@ -360,7 +360,7 @@ void drain_local_pages(void *dummy); 


extern gfp_t gfp_allowed_mask;



extern void set_gfp_allowed_mask(gfp_t mask);

extern gfp_t clear_gfp_allowed_mask(gfp_t mask);

extern void pm_restrict_gfp_mask(void);

extern void pm_restore_gfp_mask(void);



#endif /* __LINUX_GFP_H */

kernel/power/hibernate.c

+12 −10
Original line number Diff line number Diff line
@@ -327,7 +327,6 @@ static int create_image(int platform_mode) 
int hibernation_snapshot(int platform_mode)

{

	int error;

	gfp_t saved_mask;



	error = platform_begin(platform_mode);

	if (error)
@@ -339,7 +338,7 @@ int hibernation_snapshot(int platform_mode) 
		goto Close;



	suspend_console();

	saved_mask = clear_gfp_allowed_mask(GFP_IOFS);

	pm_restrict_gfp_mask();

	error = dpm_suspend_start(PMSG_FREEZE);

	if (error)

		goto Recover_platform;
@@ -348,7 +347,10 @@ int hibernation_snapshot(int platform_mode) 
		goto Recover_platform;



	error = create_image(platform_mode);

	/* Control returns here after successful restore */

	/*

	 * Control returns here (1) after the image has been created or the

	 * image creation has failed and (2) after a successful restore.

	 */



 Resume_devices:

	/* We may need to release the preallocated image pages here. */
@@ -357,7 +359,10 @@ int hibernation_snapshot(int platform_mode) 


	dpm_resume_end(in_suspend ?

		(error ? PMSG_RECOVER : PMSG_THAW) : PMSG_RESTORE);

	set_gfp_allowed_mask(saved_mask);



	if (error || !in_suspend)

		pm_restore_gfp_mask();



	resume_console();

 Close:

	platform_end(platform_mode);
@@ -452,17 +457,16 @@ static int resume_target_kernel(bool platform_mode) 
int hibernation_restore(int platform_mode)

{

	int error;

	gfp_t saved_mask;



	pm_prepare_console();

	suspend_console();

	saved_mask = clear_gfp_allowed_mask(GFP_IOFS);

	pm_restrict_gfp_mask();

	error = dpm_suspend_start(PMSG_QUIESCE);

	if (!error) {

		error = resume_target_kernel(platform_mode);

		dpm_resume_end(PMSG_RECOVER);

	}

	set_gfp_allowed_mask(saved_mask);

	pm_restore_gfp_mask();

	resume_console();

	pm_restore_console();

	return error;
@@ -476,7 +480,6 @@ int hibernation_restore(int platform_mode) 
int hibernation_platform_enter(void)

{

	int error;

	gfp_t saved_mask;



	if (!hibernation_ops)

		return -ENOSYS;
@@ -492,7 +495,6 @@ int hibernation_platform_enter(void) 


	entering_platform_hibernation = true;

	suspend_console();

	saved_mask = clear_gfp_allowed_mask(GFP_IOFS);

	error = dpm_suspend_start(PMSG_HIBERNATE);

	if (error) {

		if (hibernation_ops->recover)
@@ -536,7 +538,6 @@ int hibernation_platform_enter(void) 
 Resume_devices:

	entering_platform_hibernation = false;

	dpm_resume_end(PMSG_RESTORE);

	set_gfp_allowed_mask(saved_mask);

	resume_console();



 Close:
@@ -646,6 +647,7 @@ int hibernate(void) 
		swsusp_free();

		if (!error)

			power_down();

		pm_restore_gfp_mask();

	} else {

		pr_debug("PM: Image restored successfully.\n");

	}

kernel/power/suspend.c

+2 −3
Original line number Diff line number Diff line
@@ -197,7 +197,6 @@ static int suspend_enter(suspend_state_t state) 
int suspend_devices_and_enter(suspend_state_t state)

{

	int error;

	gfp_t saved_mask;



	if (!suspend_ops)

		return -ENOSYS;
@@ -208,7 +207,7 @@ int suspend_devices_and_enter(suspend_state_t state) 
			goto Close;

	}

	suspend_console();

	saved_mask = clear_gfp_allowed_mask(GFP_IOFS);

	pm_restrict_gfp_mask();

	suspend_test_start();

	error = dpm_suspend_start(PMSG_SUSPEND);

	if (error) {
@@ -225,7 +224,7 @@ int suspend_devices_and_enter(suspend_state_t state) 
	suspend_test_start();

	dpm_resume_end(PMSG_RESUME);

	suspend_test_finish("resume devices");

	set_gfp_allowed_mask(saved_mask);

	pm_restore_gfp_mask();

	resume_console();

 Close:

	if (suspend_ops->end)

kernel/power/user.c

+2 −0
Original line number Diff line number Diff line
@@ -263,6 +263,7 @@ static long snapshot_ioctl(struct file *filp, unsigned int cmd, 
	case SNAPSHOT_UNFREEZE:

		if (!data->frozen || data->ready)

			break;

		pm_restore_gfp_mask();

		thaw_processes();

		usermodehelper_enable();

		data->frozen = 0;
@@ -275,6 +276,7 @@ static long snapshot_ioctl(struct file *filp, unsigned int cmd, 
			error = -EPERM;

			break;

		}

		pm_restore_gfp_mask();

		error = hibernation_snapshot(data->platform_support);

		if (!error)

			error = put_user(in_suspend, (int __user *)arg);

mm/page_alloc.c

+12 −7
Original line number Diff line number Diff line
@@ -104,19 +104,24 @@ gfp_t gfp_allowed_mask __read_mostly = GFP_BOOT_MASK; 
 * only be modified with pm_mutex held, unless the suspend/hibernate code is

 * guaranteed not to run in parallel with that modification).

 */

void set_gfp_allowed_mask(gfp_t mask)



static gfp_t saved_gfp_mask;



void pm_restore_gfp_mask(void)

{

	WARN_ON(!mutex_is_locked(&pm_mutex));

	gfp_allowed_mask = mask;

	if (saved_gfp_mask) {

		gfp_allowed_mask = saved_gfp_mask;

		saved_gfp_mask = 0;

	}

}



gfp_t clear_gfp_allowed_mask(gfp_t mask)

void pm_restrict_gfp_mask(void)

{

	gfp_t ret = gfp_allowed_mask;



	WARN_ON(!mutex_is_locked(&pm_mutex));

	gfp_allowed_mask &= ~mask;

	return ret;

	WARN_ON(saved_gfp_mask);

	saved_gfp_mask = gfp_allowed_mask;

	gfp_allowed_mask &= ~GFP_IOFS;

}

#endif /* CONFIG_PM_SLEEP */

CRA Git | Maintained and supported by SUSTech CRA and CCSE