From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 987C1C433ED for ; Fri, 7 May 2021 20:31:42 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 6CAA960FD7 for ; Fri, 7 May 2021 20:31:42 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230151AbhEGUcl (ORCPT ); Fri, 7 May 2021 16:32:41 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:51738 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229675AbhEGUck (ORCPT ); Fri, 7 May 2021 16:32:40 -0400 Received: from zeniv-ca.linux.org.uk (zeniv-ca.linux.org.uk [IPv6:2607:5300:60:148a::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 20F7BC061574; Fri, 7 May 2021 13:31:40 -0700 (PDT) Received: from viro by zeniv-ca.linux.org.uk with local (Exim 4.94 #2 (Red Hat Linux)) id 1lf78G-00CNE3-Em; Fri, 07 May 2021 20:31:32 +0000 Date: Fri, 7 May 2021 20:31:32 +0000 From: Al Viro To: Linus Torvalds Cc: Kees Cook , Colin Ian King , Christoph Hellwig , Johannes Berg , linux-fsdevel , LKML Subject: Re: splice() from /dev/zero to a pipe does not work (5.9+) Message-ID: References: <2add1129-d42e-176d-353d-3aca21280ead@canonical.com> <202105071116.638258236E@keescook> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Sender: Al Viro Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, May 07, 2021 at 12:29:44PM -0700, Linus Torvalds wrote: > On Fri, May 7, 2021 at 12:17 PM Al Viro wrote: > > > > Umm... That would do wonders to anything that used to do > > copy_to_user()/clear_user()/copy_to_user() and got converted > > to copy_to_iter()/iov_iter_zero()/copy_to_iter()... > > I didn't mean for iov_iter_zero doing this - only splice_read_zero(). > > > Are you sure we can shove zero page into pipe, anyway? > > IIRC, get_page()/put_page() on that is not allowed, > > That's what the > > buf->ops = &zero_pipe_buf_ops; > > is for. The zero_pipe_buf_ops would have empty get and release > functions, and a 'steal' function that always returns false. > > That's how the pipe pages are supposed to work: there are people who > put non-page data (ie things like skbuff allocations etc) into a > splice pipe buffer. It's why we have those "ops" pointers. Supposed to - sure, but I'd like to verify that they actually do work that way before we go there. Let me RTFS a bit...