On Thu, Jun 06, 2024 at 10:08:20AM -0400, Martin K. Petersen wrote: > > Christoph, > > > Metadata added by bio_integrity_prep is using plain kmalloc, which > > leads to random kernel memory being written media. For PI metadata > > this is limited to the app tag that isn't used by kernel generated > > metadata, but for non-PI metadata the entire buffer leaks kernel > > memory. > > We do explicitly set the app_tag to 0 for PI so it's only non-PI > metadata that's affected. Ah, true. I could switch to then just zeroing the buffer in ->generate_fn for non-PI metadata only. That's actually the first version I prototyped.