From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id B79F0C7EE23 for ; Thu, 1 Jun 2023 03:34:53 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp3.osuosl.org (Postfix) with ESMTP id 204386115D; Thu, 1 Jun 2023 03:34:53 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp3.osuosl.org 204386115D Authentication-Results: smtp3.osuosl.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=EwClyAb1 X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp3.osuosl.org ([127.0.0.1]) by localhost (smtp3.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id afeJIQG2WGPF; Thu, 1 Jun 2023 03:34:51 +0000 (UTC) Received: from lists.linuxfoundation.org (lf-lists.osuosl.org [IPv6:2605:bc80:3010:104::8cd3:938]) by smtp3.osuosl.org (Postfix) with ESMTPS id C7D3261317; Thu, 1 Jun 2023 03:34:50 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp3.osuosl.org C7D3261317 Received: from lf-lists.osuosl.org (localhost [127.0.0.1]) by lists.linuxfoundation.org (Postfix) with ESMTP id 8755DC007C; Thu, 1 Jun 2023 03:34:50 +0000 (UTC) Received: from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138]) by lists.linuxfoundation.org (Postfix) with ESMTP id 87EF5C0037 for ; Thu, 1 Jun 2023 03:34:49 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp1.osuosl.org (Postfix) with ESMTP id 664C683BA7 for ; Thu, 1 Jun 2023 03:34:49 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 664C683BA7 Authentication-Results: smtp1.osuosl.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=EwClyAb1 X-Virus-Scanned: amavisd-new at osuosl.org Received: from smtp1.osuosl.org ([127.0.0.1]) by localhost (smtp1.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YKolnJ4OTQgx for ; Thu, 1 Jun 2023 03:34:47 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.8.0 DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 980CD83BA4 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by smtp1.osuosl.org (Postfix) with ESMTPS id 980CD83BA4 for ; Thu, 1 Jun 2023 03:34:47 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1685590486; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=jPis8nJbphrb4gqqhUZ5tZna31GQutP+PtzpROegkuM=; b=EwClyAb1mR6Ko9KwN6Pngl+h2aSG++r+P35cjQUbpVXoANOhuQQmHbFbVVYWYeWsRJ+uof XTGXfARbHrWVY4Jk/Cjjs0xhDFVcLU8tuZSBFVAPGs1kQ/ZnRArDtCIWiCxZqMocC6mGYP 7Q5qHxJagsLXty0W1k86gWTE+/sTc2M= Received: from mail-wr1-f71.google.com (mail-wr1-f71.google.com [209.85.221.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-27-0GWTRPTVOoKnIhF1Z1Nm8g-1; Wed, 31 May 2023 23:34:45 -0400 X-MC-Unique: 0GWTRPTVOoKnIhF1Z1Nm8g-1 Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-30ae8a5006dso469811f8f.2 for ; Wed, 31 May 2023 20:34:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1685590484; x=1688182484; h=in-reply-to:content-transfer-encoding:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=jPis8nJbphrb4gqqhUZ5tZna31GQutP+PtzpROegkuM=; b=P8G7oQ5aMpqgZJZYSPT5pZ6/2y8IXXL3vlPLe+jv83IyOqj/p+FYb8atTjf2wfQ1lf 3CdwDbVR0aSVvN/vQ1qHaf0EHCvgYxm5DMrbJSO7OCSBgi0TJlHFUsYuexmPvB+5BinX 0i8ug+medCkk0yvVhzarg9cDiQE8zpCFAowNbeRK5zWCsa2G3jYoeUpc7h9SS53THY1H 7IoJ1tRn+xqFEdkVDNZU4+54byTnm3xjyYaLbkuKAfnTbGOff4ZnZCL7Zz2d9kE5H4WG M/e9YBMZM3EPzTQNxysKlHBMVbLfX02tTEpZXWm+Tf8icahI8GMyeSajZukOYaS4Q+y/ BaJQ== X-Gm-Message-State: AC+VfDxYaU5IgVoa+s8CIqM8DQIYxSZfPuiXsxSFiNZHOXw322iaG+/n kFHch4h4xAq9WGeAareGF0lq3Kp7oWxY/C3DtSkk6GIBQK+H0s2amuGDXGHwTBRn3rZSFjVQ3kD YHbJ3WfvbzmnYnyNWbX30Ra+mfd12+ZTV0fuL8GnJ+w== X-Received: by 2002:adf:fec2:0:b0:309:48ec:2c82 with SMTP id q2-20020adffec2000000b0030948ec2c82mr895139wrs.48.1685590483975; Wed, 31 May 2023 20:34:43 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ5d0JL4IrMcOOgir++EfIl95brEk7rWDkUAFkiy/+XMcw5NXm7ksmTQIe1VmkclOiJduiDyrw== X-Received: by 2002:adf:fec2:0:b0:309:48ec:2c82 with SMTP id q2-20020adffec2000000b0030948ec2c82mr895130wrs.48.1685590483533; Wed, 31 May 2023 20:34:43 -0700 (PDT) Received: from redhat.com ([2.52.143.63]) by smtp.gmail.com with ESMTPSA id b10-20020adfee8a000000b0030aefd11892sm8481214wro.41.2023.05.31.20.34.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 31 May 2023 20:34:42 -0700 (PDT) Date: Wed, 31 May 2023 23:34:39 -0400 From: "Michael S. Tsirkin" To: Jason Wang Subject: Re: [PATCH] virtio_ring: validate used buffer length Message-ID: <20230531233332-mutt-send-email-mst@kernel.org> References: <20230526063041.18359-1-jasowang@redhat.com> <20230528033037-mutt-send-email-mst@kernel.org> <20230529055729-mutt-send-email-mst@kernel.org> <20230531014326-mutt-send-email-mst@kernel.org> <20230531053001-mutt-send-email-mst@kernel.org> MIME-Version: 1.0 In-Reply-To: X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Disposition: inline Cc: xuanzhuo@linux.alibaba.com, linux-kernel@vger.kernel.org, virtualization@lists.linux-foundation.org X-BeenThere: virtualization@lists.linux-foundation.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Linux virtualization List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: virtualization-bounces@lists.linux-foundation.org Sender: "Virtualization" T24gVGh1LCBKdW4gMDEsIDIwMjMgYXQgMDk6MTI6NTNBTSArMDgwMCwgSmFzb24gV2FuZyB3cm90 ZToKPiBPbiBXZWQsIE1heSAzMSwgMjAyMyBhdCA1OjU14oCvUE0gTWljaGFlbCBTLiBUc2lya2lu IDxtc3RAcmVkaGF0LmNvbT4gd3JvdGU6Cj4gPgo+ID4gT24gV2VkLCBNYXkgMzEsIDIwMjMgYXQg MDM6MzY6NTFQTSArMDgwMCwgSmFzb24gV2FuZyB3cm90ZToKPiA+ID4gT24gV2VkLCBNYXkgMzEs IDIwMjMgYXQgMTo1MOKAr1BNIE1pY2hhZWwgUy4gVHNpcmtpbiA8bXN0QHJlZGhhdC5jb20+IHdy b3RlOgo+ID4gPiA+Cj4gPiA+ID4gT24gV2VkLCBNYXkgMzEsIDIwMjMgYXQgMDk6MDU6MDBBTSAr MDgwMCwgSmFzb24gV2FuZyB3cm90ZToKPiA+ID4gPiA+IE9uIE1vbiwgTWF5IDI5LCAyMDIzIGF0 IDY6MDPigK9QTSBNaWNoYWVsIFMuIFRzaXJraW4gPG1zdEByZWRoYXQuY29tPiB3cm90ZToKPiA+ ID4gPiA+ID4KPiA+ID4gPiA+ID4gT24gTW9uLCBNYXkgMjksIDIwMjMgYXQgMDk6MTg6MTBBTSAr MDgwMCwgSmFzb24gV2FuZyB3cm90ZToKPiA+ID4gPiA+ID4gPiBPbiBTdW4sIE1heSAyOCwgMjAy MyBhdCAzOjU34oCvUE0gTWljaGFlbCBTLiBUc2lya2luIDxtc3RAcmVkaGF0LmNvbT4gd3JvdGU6 Cj4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gT24gRnJpLCBNYXkgMjYsIDIwMjMgYXQg MDI6MzA6NDFQTSArMDgwMCwgSmFzb24gV2FuZyB3cm90ZToKPiA+ID4gPiA+ID4gPiA+ID4gVGhp cyBwYXRjaCB2YWxpZGF0ZQo+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+IHZhbGlkYXRl cwo+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gdGhlIHVzZWQgYnVmZmVyIGxlbmd0 aCBwcm92aWRlZCBieSB0aGUgZGV2aWNlCj4gPiA+ID4gPiA+ID4gPiA+IGJlZm9yZSB0cnlpbmcg dG8gdXNlIGl0Lgo+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+IGJlZm9yZSByZXR1cm5p bmcgaXQgdG8gY2FsbGVyCj4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiBUaGlzIGlz IGRvbmUgYnkgcmVtZW1iZXJpbmcgdGhlIGluIGJ1ZmZlcgo+ID4gPiA+ID4gPiA+ID4gPiBsZW5n dGggaW4gYSBkZWRpY2F0ZWQgYXJyYXkgZHVyaW5nIHZpcnRxdWV1ZV9hZGQoKSwgdGhlbiB3ZSBj YW4gZmFpbAo+ID4gPiA+ID4gPiA+ID4gPiB0aGUgdmlydHF1ZXVlX2dldF9idWYoKSB3aGVuIHdl IGZpbmQgdGhlIGRldmljZSBpcyB0cnlpbmcgdG8gZ2l2ZSB1cyBhCj4gPiA+ID4gPiA+ID4gPiA+ IHVzZWQgYnVmZmVyIGxlbmd0aCB3aGljaCBpcyBncmVhdGVyIHRoYW4gd2Ugc3RvcmVkIGJlZm9y ZS4KPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiB0aGFuIHdoYXQgd2Ugc3RvcmVkCj4g PiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiBUaGlzIHZh bGlkYXRpb24gaXMgZGlzYWJsZQo+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+IGRpc2Fi bGVkCj4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiBieSBkZWZhdWx0IHZpYSBtb2R1 bGUgcGFyYW1ldGVyIHRvIHVuYnJlYWsKPiA+ID4gPiA+ID4gPiA+ID4gc29tZSBleGlzdGluZyBk ZXZpY2VzIHNpbmNlIHNvbWUgbGVnYWN5IGRldmljZXMgYXJlIGtub3duIHRvIHJlcG9ydAo+ID4g PiA+ID4gPiA+ID4gPiBidWdneSB1c2VkIGxlbmd0aC4KPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4g PiA+ID4gPiA+ID4gU2lnbmVkLW9mZi1ieTogSmFzb24gV2FuZyA8amFzb3dhbmdAcmVkaGF0LmNv bT4KPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiBGaXJzdCBJJ20gbm90IG1lcmdpbmcg dGhpcyB3aXRob3V0IG1vcmUgZGF0YSBhYm91dAo+ID4gPiA+ID4gPiA+ID4gd2hhdCBpcyBrbm93 biB0byBiZSBicm9rZW4gYW5kIHdoYXQgaXMga25vd24gdG8gd29yayB3ZWxsCj4gPiA+ID4gPiA+ ID4gPiBpbiB0aGUgY29tbWl0IGxvZy4gQW5kIGhvdyBleGFjdGx5IGRvIHRoaW5ncyB3b3JrIGlm IHVzZWQgbGVuZ3RoCj4gPiA+ID4gPiA+ID4gPiBpcyB3cm9uZz8KPiA+ID4gPiA+ID4gPgo+ID4g PiA+ID4gPiA+IEFzc3VtaW5nIHRoZSBkZXZpY2UgaXMgbWFsaWNpb3VzLCBpdCB3b3VsZCBiZSB2 ZXJ5IGhhcmQgdG8gYW5zd2VyLgo+ID4gPiA+ID4gPiA+IEF1ZGl0aW5nIGFuZCBmdXp6aW5nIHdv bid0IGNvdmVyIGV2ZXJ5IGNhc2UuIEluc3RlYWQgb2YgdHJ5aW5nIHRvIHNlZWsKPiA+ID4gPiA+ ID4gPiB0aGUgYW5zd2VyLCB3ZSBjYW4gc2ltcGx5IG1ha2Ugc3VyZSB0aGUgdXNlZCBpbiBidWZm ZXIgbGVuZ3RoIGlzCj4gPiA+ID4gPiA+ID4gdmFsaWRhdGVkIHRoZW4gd2Uga25vdyB3ZSdyZSBm aW5lIG9yIG5vdC4KPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gVG8gcmVzdGF0ZSB0aGUgcXVlc3Rp b24sIHlvdSBzYWlkIGFib3ZlICJzb21lIGxlZ2FjeSBkZXZpY2VzIGFyZSBrbm93bgo+ID4gPiA+ ID4gPiB0byByZXBvcnQgYnVnZ3kgdXNlZCBsZW5ndGgiLiBJZiB0aGV5IHJlcG9ydCBidWdneSBs ZW5ndGggdGhlbiBob3cKPiA+ID4gPiA+ID4gY2FuIHRoaW5ncyB3b3JrPwo+ID4gPiA+ID4KPiA+ ID4gPiA+IFRoZSB2YWxpZGF0aW9uIGlzIGRpc2FibGVkIGZvciBsZWdhY3kgZGV2aWNlIChhcyBz dGF0ZWQgaW4gdGhlIGNoYW5nZWxvZyk6Cj4gPiA+ID4gPgo+ID4gPiA+ID4gc3RhdGljIGJvb2wg dnJpbmdfbmVlZHNfdXNlZF92YWxpZGF0aW9uKGNvbnN0IHN0cnVjdCB2aXJ0aW9fZGV2aWNlICp2 ZGV2KQo+ID4gPiA+ID4gewo+ID4gPiA+ID4gICAgICAgICAvKgo+ID4gPiA+ID4gICAgICAgICAg KiBTZXZlcmFsIGxlZ2FjeSBkZXZpY2VzIGFyZSBrbm93biB0byBwcm9kdWNlIGJ1Z2d5IHVzZWQK PiA+ID4gPiA+ICAgICAgICAgICogbGVuZ3RoLiBJbiBvcmRlciB0byBsZXQgZHJpdmVyIHdvcmss IHdlIHdvbid0IHZhbGlkYXRlIHVzZWQKPiA+ID4gPiA+ICAgICAgICAgICogYnVmZmVyIGxlbmd0 aCBpbiB0aGlzIGNhc2UuCj4gPiA+ID4gPiAgICAgICAgICAqLwo+ID4gPiA+ID4gICAgICAgICBp ZiAoIXZpcnRpb19oYXNfZmVhdHVyZSh2ZGV2LCBWSVJUSU9fRl9WRVJTSU9OXzEpKQo+ID4gPiA+ ID4gICAgICAgICAgICAgICAgIHJldHVybiBmYWxzZTsKPiA+ID4gPiA+ICAgICAgICAgaWYgKGZv cmNlX3VzZWRfdmFsaWRhdGlvbikKPiA+ID4gPiA+ICAgICAgICAgICAgICAgICByZXR1cm4gdHJ1 ZTsKPiA+ID4gPiA+ICAgICAgICAgcmV0dXJuIGZhbHNlOwo+ID4gPiA+ID4gfQo+ID4gPiA+ID4K PiA+ID4gPiA+IFRoaXMgc2VlbXMgdG8gYmUgd2hhdCB3ZSd2ZSBhZ3JlZWQgaW4gbGFzdCB2ZXJz aW9uOgo+ID4gPiA+ID4KPiA+ID4gPiA+IGh0dHBzOi8vbG9yZS5rZXJuZWwub3JnL2FsbC9DQU5M c1lreGZoYW1VVTBiYjRqN3k2TjRfRzlvZEt4TENqWHhnWEV4NFNKNl9LZitNMlFAbWFpbC5nbWFp bC5jb20vVC8jbTMxZjNiMDZmOTAzMmJlZWMxNzVjMzEyZGZhMjUzMmNiMDhiMTVjNTYKPiA+ID4g PiA+Cj4gPiA+ID4gPiBUaGFua3MKPiA+ID4gPiA+Cj4gPiA+ID4KPiA+ID4gPiBJIGRvbid0IGdl dCBpdC4gWW91IHdyb3RlOgo+ID4gPiA+Cj4gPiA+ID4gICAgICAgICBUaGlzIHZhbGlkYXRpb24g aXMgZGlzYWJsZQo+ID4gPiA+ICAgICAgICAgYnkgZGVmYXVsdCB2aWEgbW9kdWxlIHBhcmFtZXRl ciB0byB1bmJyZWFrCj4gPiA+ID4gICAgICAgICBzb21lIGV4aXN0aW5nIGRldmljZXMgc2luY2Ug c29tZSBsZWdhY3kgZGV2aWNlcyBhcmUga25vd24gdG8gcmVwb3J0Cj4gPiA+ID4gICAgICAgICBi dWdneSB1c2VkIGxlbmd0aC4KPiA+ID4gPgo+ID4gPiA+IHdoaWNoIGRldmljZXM/Cj4gPiA+Cj4g PiA+IGxlZ2FjeSBycG1zZyBhbmQgdnNvY2sgZGV2aWNlIChiZWZvcmUgNDlkOGM1ZmZhZDA3KSBh dCBsZWFzdC4KPiA+ID4KPiA+ID4gPiB3aHkgZG8geW91IG5lZWQgYSBtb2R1bGUgcGFyYW1ldGVy Pwo+ID4gPgo+ID4gPiBJZiB3ZSBlbmFibGUgaXQgdW5jb25kaXRpb25hbGx5IGZvciBtb2Rlcm4g ZGV2aWNlcywgaXQgbWF5IGJyZWFrIHNvbWUKPiA+ID4gYnVnZ3kgbW9kZW4gZGV2aWNlICh2c29j ayB3aXRob3V0IGEgZml4IGFzIGFuIGV4YW1wbGUpLgo+ID4KPiA+IFByZXN1bWFibHkgdGhpcyBo YXBwZW5zIGJlY2F1c2UgdnNvY2sgZG9lcyBub3QgaGF2ZSBhbnkgaW5idWYgYXQgYWxsCj4gPiBz byBpdCBpZ25vcmVzIHRoZSBsZW5ndGguCj4gPiBXZSBoYWQgdGhlIHNhbWUgd2l0aCB2aXJ0aW8g bmV0IHR4IGEgbG9uZyB0aW1lIGFnby4KPiA+Cj4gPiBNeSBzdWdnZXN0aW9uIGlzIHRoZW4gbm90 IHRvIGZhaWwgLSBqdXN0IGNhcCBsZW5ndGggYXQgdGhlIGRtYSBsZW5ndGgKPiA+IHNldCBieSBk cml2ZXIuIEFub3RoZXIgaWRlYSBpcyB0aGF0IGlmIGRtYSBsZW4gaXMgMCB0aGVuIGRvbid0IHZh bGlkYXRlCj4gPiBhdCBhbGwgLSBkcml2ZXIgdGhhdCBkaWQgbm90IGFkZCBhbnkgaW5idWZzIGlz IG5vdCBnb2luZyB0byBsb29rCj4gPiBhdCBsZW5ndGguCj4gPgo+ID4gQWxsb3dpbmcgcGFzc2lu ZyBOVUxMIGFzIGxlbmd0aCBhbmQgc2tpcHBpbmcgdmFsaWRhdGlvbgo+ID4gaWYgbGVuID0gMCBt aWdodCBhbHNvIGJlIGEgZ29vZCBpZGVhLgo+IAo+IFRoZSBhYm92ZSBzaG91bGQgd29yayBmb3Ig c3VyZSwgYnV0IGEgcXVlc3Rpb24gaXMsIGluIHRoZSBjYXNlIG9mCj4gY29uZmlkZW50aWFsIGNv bXB1dGluZywgaWYgYSBkcml2ZXIgZGV0ZWN0cyBhIG1hbGljaW91cyBkZXZpY2UsIGlzIGl0Cj4g cmVhbGx5IGdvb2QgdG8gdHJ5IHRvIGtlZXAgd29ya2luZyBvciB3YXJuIGFuZCBkaXNhYmxlIHRo ZSBkZXZpY2U/IE9yCj4gbWF5YmUgd2UgY2FuIGhhdmUgYW4gb3B0aW9uIGZvciB0aGUgdXNlciB0 byBkZWNpZGU/CgpBIG1pbm9yIGJ1ZyBpbiBhbiB1bnVzZWQgZmllbGQgaXMgbm90IHdvcnRoIHBh bmljaW5nIGFib3V0LgoKPiA+Cj4gPgo+ID4gPiA+Cj4gPiA+ID4KPiA+ID4gPiA+ID4KPiA+ID4g PiA+ID4gPiA+IFNlY29uZCB3aGF0J3Mgd3Jvbmcgd2l0aCBkbWFfZGVzY19leHRyYSB0aGF0IHdl IGFscmVhZHkgbWFpbnRhaW4/Cj4gPiA+ID4gPiA+ID4gPiBUaGlyZCBtb3RpdmF0aW9uIC0gaXQn cyBwYXJ0IGFuZCBwYXJjZWwgb2YgdGhlIGhhcmRlbmluZyBlZmZvcnQgeWVzPwo+ID4gPiA+ID4g PiA+Cj4gPiA+ID4gPiA+ID4gVGhleSBhcmUgZGlmZmVyZW50LiBkbWFfZGVzY19leHRyYSBpcyBm b3IgYSBkZXNjcmlwdG9yIHJpbmcsIGJ1dCB0aGlzCj4gPiA+ID4gPiA+ID4gaXMgZm9yIGEgdXNl ZCByaW5nLiBUZWNobmljYWxseSB3ZSBjYW4gZ28gYmFjayB0byBpdGVyYXRlIG9uIHRoZQo+ID4g PiA+ID4gPiA+IGRlc2NyaXB0b3IgcmluZyBmb3IgYSBsZWdhbCB1c2VkIGluIGJ1ZmZlciBsZW5n dGguIEJ1dCBpdCB3aWxsIGhhdmUKPiA+ID4gPiA+ID4gPiB3b3JzZSBwZXJmb3JtYW5jZS4KPiA+ ID4gPiA+ID4KPiA+ID4gPiA+ID4gSSBkb24ndCByZWFsbHkgdW5kZXJzdGFuZC4gV2UgYWxyZWFk eSBpdGVyYXRlIHdoZW4gd2UgdW5tYXAgLQo+ID4gPiA+ID4gPiBhbGwgdGhhdCBpcyBuZWNlc3Nh cnkgaXMgdG8gc3VidHJhY3QgaXQgZnJvbSB1c2VkIGxlbmd0aCwgaWYgYXQKPiA+ID4gPiA+ID4g dGhlIGVuZCBvZiB0aGUgcHJvY2VzcyBpdCBpcyA+MCB0aGVuIHdlIGtub3cgdXNlZCBsZW5ndGgg aXMgdG9vCj4gPiA+ID4gPiA+IGxhcmdlLgo+ID4gPiA+ID4KPiA+ID4gPiA+IFllcywgYnV0IGl0 IGlzIHRoZSBqb2IgdGhhdCBpcyBkb25lIGluIHRoZSBkcml2ZXIgbGV2ZWwgbm90IHRoZSB2aXJ0 aW8KPiA+ID4gPiA+IGNvcmUuCj4gPiA+ID4KPiA+ID4gPiBXaGF0IGpvYj8KPiA+ID4KPiA+ID4g SSBtZWFudCB0aGUgZHJpdmVyIGNhbiBkbyB0aGUgdmFsaWRhdGlvbiBzaW5jZSBpdCBoYXMgdGhl IGtub3dsZWRnZSBvZgo+ID4gPiB0aGUgYnVmZmVyIGxlbmd0aCBpZiBpdCB3YW50cy4KPiA+Cj4g PiBJdCBkb2VzIG5vdCBuZWNlc3NhcmlseSBoYXZlIGl0IC0gbm90IGlmIHZpcnRpbyBpcyBkb2lu ZyBETUEKPiA+IG1hcHBpbmcuCj4gCj4gSSBkb24ndCBzZWUgYW55IGRlcGVuZGVuY2llcyBmb3Ig RE1BLCBJIG1lYW4gYW55aG93IHRoZSBpbiBidWZmZXIgaXMKPiBhbGxvY2F0ZWQgYnkgdGhlIGRy aXZlciwgc28gaXQgc2hvdWxkIGtub3cgaG93IGxhcmdlIGl0IGlzLgo+IAo+ID4KPiA+Cj4gPiA+ ID4gdW5tYXAgaXMgZG9uZSBpbiBkZXRhY2hfYnVmX3NwbGl0IGFuZCBkZXRhY2hfYnVmX3BhY2tl ZCByZXNwZWN0aXZlbHkuCj4gPiA+ID4gdnJpbmdfZGVzY19leHRyYSBpc24ndCBldmVuIHZpc2li bGUgb3V0c2lkZSBkcml2ZXJzL3ZpcnRpby92aXJ0aW9fcmluZy5jCj4gPiA+Cj4gPiA+IGRlc2Nf ZXh0cmEgZG9lc24ndCBjb250YWluIGJ1ZmZlciBsZW5ndGggZm9yIHRoZSBjYXNlIG9mIGluZGly ZWN0Cj4gPiA+IGRlc2NyaXB0b3JzLiBTbyB3ZSBuZWVkIHRvIGl0ZXJhdGUgaW4gdGhlIGRlc2Ny aXB0b3JzIHdoZW4gaXQgbG9va3MKPiA+ID4gZXhwZW5zaXZlIGlmIHdlIGRvbid0IG5lZWQgdW5t YXAuCj4gPiA+Cj4gPiA+IFRoYW5rcwo+ID4KPiA+IFdlbGwgYXQgdGhlIG1vbWVudCB3ZSBvbmx5 IGRvbid0IHVubWFwIGlmIERNQSBBUEkgaXMgYnlwYXNzZWQuCj4gCj4gSWYgSSB1bmRlcnN0YW5k IGNvcnJlY3RseSwgd2Ugd2lsbCBwcm9iYWJseSBzdXBwb3J0IHByZW1hcHBlZCBETUEKPiBidWZm ZXJzIHNvb24gKEFGX1hEUCBhbmQgcGFnZSBwb29sKT8KPiAKPiBUaGFua3MKPiAKPiA+IEFuZCB0 aGVuCj4gPiB3ZSBkb24ndCBuZWVkIHRvIHZhbGlkYXRlIGxlbmd0aCBlaXRoZXIuIEZ1bmRhbWVu dGFsbHksIHdpdGhvdXQKPiA+IEFDQ0VTU19QTEFURk9STSBkZXZpY2UgaXMgdHJ1c3RlZC4KPiA+ Cj4gPgo+ID4gPiA+Cj4gPiA+ID4gRm9yIGRyaXZlcnMgdGhhdCBkbyB1bm1hcCBhdCBkcml2ZXIg bGV2ZWwgLSBJIGd1ZXNzIHRoZXkgY2FuIGRvCj4gPiA+ID4gdmFsaWRhdGlvbiB0aGVyZSB0b28u Cj4gPiA+ID4KPiA+ID4gPiA+IFZhbGlkYXRpb24gaW4gdmlydGlvIGNvcmUgaXMgc3RpbGwgbmVj ZXNzYXJ5IHNpbmNlIHRoZXkncmUKPiA+ID4gPiA+IHdvcmtpbmcgYXQgZGlmZmVyZW50IGxldmVs cyBhbmQgaXQncyBoYXJkIHRvIGZvcmNlIHRoZSB2YWxpZGF0aW9uIGluCj4gPiA+ID4gPiBhbGwg ZHJpdmVycyBieSBjb2Rlcy4gTGFzdCB2ZXJzaW9uIGludHJvZHVjZXMgYQo+ID4gPiA+ID4gc3Vw cHJlc3NfZHJpdmVyX3ZhbGlkYXRpb24gdG8gYWxsb3cgdGhlIGRyaXZlciB0byBzdXBwcmVzcyB0 aGUgY29yZQo+ID4gPiA+ID4gdmFsaWRhdGlvbiB3aGljaCBzZWVtcyBub3QgZ29vZCwgd2UgbmVl ZCBhIHdheSB0byBmb3JjZSB0aGUKPiA+ID4gPiA+IHZpcnRpb19yaW5nIGNvZGUgdG8gZG8gdmFs aWRhdGlvbiBiZWZvcmUuCj4gPiA+ID4KPiA+ID4gPiBXaHkgZG8gd2U/IElmIGRyaXZlciB2YWxp ZGF0ZXMgbGVuZ3RoIHZpcnRpb19yaW5nIGRvZXMgbm90IG5lZWQgdG8KPiA+ID4gPiB2YWxpZGF0 ZS4gIElmIGRyaXZlciBkb2VzIG5vdCB1c2UgbGVuZ3RoIHZpcnRpb19yaW5nIGRvZXMgbm90IG5l ZWQgdG8KPiA+ID4gPiB2YWxpZGF0ZS4gY29yZSBjYW4gcHJvdmlkZSB0aGlzIHNlcnZpY2UgZm9y IHRoZSBnYXppbGxpb24gbm9uCj4gPiA+ID4gcGVyZm9ybWFuY2UgY3JpdGljYWwgZHJpdmVycyB0 aGF0IGp1c3Qgd2FudCB0byBrZWVwIHRoaW5ncyBzaW1wbGUsCj4gPiA+ID4gYnV0IHRoZSA0LTUg Y3JpdGljYWwgb25lcyBjYW4gZG8gdGhlaXIgb3duIHZhbGlkYXRpb24gaWYgdGhleSB3YW50IHRv Lgo+ID4gPiA+Cj4gPiA+ID4gPiBPciBzdWNoIHN0dWZmIGNvdWxkIGJlIGFkZGVkCj4gPiA+ID4g PiBvbiB0b3Agc2luY2UgdGhlIHZhbGlkYXRpb24gaXMgYnkgZGVmYXVsdCBhbnl3YXkuCj4gPiA+ ID4gPgo+ID4gPiA+ID4gVGhhbmtzCj4gPiA+ID4KPiA+ID4gPgo+ID4gPiA+Cj4gPiA+ID4gPiA+ Cj4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiBJJ2QgbGlrZSB0byBrbm93IHRoZSBmYXRlIG9m IFZJUlRJT19IQVJERU5fTk9USUZJQ0FUSU9OIGJlZm9yZQo+ID4gPiA+ID4gPiA+ID4gd2UgZG8g bW9yZSBoYXJkZW5pbmcuIElmIGl0J3MgaXJyZXZvY2FibHkgYnJva2VuIGxldCdzIHJpcCBpdCBv dXQ/Cj4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiBTbyB0aGUgcGxhbiBpcwo+ID4gPiA+ID4g PiA+Cj4gPiA+ID4gPiA+ID4gMSkgZmluaXNoIHVzZWQgcmluZyB2YWxpZGF0aW9uICh0aGlzIGhh ZCBiZWVuIHByb3Bvc2VkLCBtZXJnZWQgYW5kCj4gPiA+ID4gPiA+ID4gcmV2ZXJ0ZWQgYmVmb3Jl IG5vdGlmaWNhdGlvbiBoYXJkZW5pbmcpCj4gPiA+ID4gPiA+ID4gMikgZG8gbm90aWZpY2F0aW9u IGhhcmRlbmluZyBvbiB0b3AuCj4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiBTbyBsZXQncyBs ZWF2ZSBpdCBhcyBpcyBhbmQgSSB3aWxsIGRvIGEgcmV3b3JrIGFmdGVyIHdlIGZpbmFsaXplIHRo ZQo+ID4gPiA+ID4gPiA+IHVzZWQgcmluZyB2YWxpZGF0aW9uLgo+ID4gPiA+ID4gPiA+Cj4gPiA+ ID4gPiA+ID4gVGhhbmtzCj4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiAtLS0KPiA+ID4gPiA+ID4gPiA+ID4gQ2hhbmdlcyBzaW5j ZSBWNDoKPiA+ID4gPiA+ID4gPiA+ID4gLSBkcm9wIHRoZSBmbGF0IGZvciBkcml2ZXIgdG8gc3Vw cHJlc3MgdGhlIGNoZWNrCj4gPiA+ID4gPiA+ID4gPiA+IC0gdmFsaWRhdGlvbiBpcyBkaXNhYmxl ZCBieSBkZWZhdWx0Cj4gPiA+ID4gPiA+ID4gPiA+IC0gZG9uJ3QgZG8gdmFsaWRhdGlvbiBmb3Ig bGVnYWN5IGRldmljZQo+ID4gPiA+ID4gPiA+ID4gPiAtIHJlYmFzZSBhbmQgc3VwcG9ydCB2aXJ0 cXVldWUgcmVzaXplCj4gPiA+ID4gPiA+ID4gPiA+IC0tLQo+ID4gPiA+ID4gPiA+ID4gPiAgZHJp dmVycy92aXJ0aW8vdmlydGlvX3JpbmcuYyB8IDc1ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKwo+ID4gPiA+ID4gPiA+ID4gPiAgMSBmaWxlIGNoYW5nZWQsIDc1IGluc2VydGlv bnMoKykKPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gZGlmZiAtLWdpdCBhL2Ry aXZlcnMvdmlydGlvL3ZpcnRpb19yaW5nLmMgYi9kcml2ZXJzL3ZpcnRpby92aXJ0aW9fcmluZy5j Cj4gPiA+ID4gPiA+ID4gPiA+IGluZGV4IDE0M2YzODBiYWExYy4uNWIxNTE2MDVhYWY4IDEwMDY0 NAo+ID4gPiA+ID4gPiA+ID4gPiAtLS0gYS9kcml2ZXJzL3ZpcnRpby92aXJ0aW9fcmluZy5jCj4g PiA+ID4gPiA+ID4gPiA+ICsrKyBiL2RyaXZlcnMvdmlydGlvL3ZpcnRpb19yaW5nLmMKPiA+ID4g PiA+ID4gPiA+ID4gQEAgLTE1LDYgKzE1LDkgQEAKPiA+ID4gPiA+ID4gPiA+ID4gICNpbmNsdWRl IDxsaW51eC9zcGlubG9jay5oPgo+ID4gPiA+ID4gPiA+ID4gPiAgI2luY2x1ZGUgPHhlbi94ZW4u aD4KPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gK3N0YXRpYyBib29sIGZvcmNl X3VzZWRfdmFsaWRhdGlvbiA9IGZhbHNlOwo+ID4gPiA+ID4gPiA+ID4gPiArbW9kdWxlX3BhcmFt KGZvcmNlX3VzZWRfdmFsaWRhdGlvbiwgYm9vbCwgMDQ0NCk7Cj4gPiA+ID4gPiA+ID4gPiA+ICsK PiA+ID4gPiA+ID4gPiA+ID4gICNpZmRlZiBERUJVRwo+ID4gPiA+ID4gPiA+ID4gPiAgLyogRm9y IGRldmVsb3BtZW50LCB3ZSB3YW50IHRvIGNyYXNoIHdoZW5ldmVyIHRoZSByaW5nIGlzIHNjcmV3 ZWQuICovCj4gPiA+ID4gPiA+ID4gPiA+ICAjZGVmaW5lIEJBRF9SSU5HKF92cSwgZm10LCBhcmdz Li4uKSAgICAgICAgICAgICAgICAgICAgICAgICAgXAo+ID4gPiA+ID4gPiA+ID4gPiBAQCAtMTA1 LDYgKzEwOCw5IEBAIHN0cnVjdCB2cmluZ192aXJ0cXVldWVfc3BsaXQgewo+ID4gPiA+ID4gPiA+ ID4gPiAgICAgICBzdHJ1Y3QgdnJpbmdfZGVzY19zdGF0ZV9zcGxpdCAqZGVzY19zdGF0ZTsKPiA+ ID4gPiA+ID4gPiA+ID4gICAgICAgc3RydWN0IHZyaW5nX2Rlc2NfZXh0cmEgKmRlc2NfZXh0cmE7 Cj4gPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgIC8qIE1heGltdW0gaW4g YnVmZmVyIGxlbmd0aCwgTlVMTCBtZWFucyBubyB1c2VkIHZhbGlkYXRpb24gKi8KPiA+ID4gPiA+ ID4gPiA+ID4gKyAgICAgdTMyICpidWZsZW47Cj4gPiA+ID4gPiA+ID4gPiA+ICsKPiA+ID4gPiA+ ID4gPiA+ID4gICAgICAgLyogRE1BIGFkZHJlc3MgYW5kIHNpemUgaW5mb3JtYXRpb24gKi8KPiA+ ID4gPiA+ID4gPiA+ID4gICAgICAgZG1hX2FkZHJfdCBxdWV1ZV9kbWFfYWRkcjsKPiA+ID4gPiA+ ID4gPiA+ID4gICAgICAgc2l6ZV90IHF1ZXVlX3NpemVfaW5fYnl0ZXM7Cj4gPiA+ID4gPiA+ID4g PiA+IEBAIC0xNDUsNiArMTUxLDkgQEAgc3RydWN0IHZyaW5nX3ZpcnRxdWV1ZV9wYWNrZWQgewo+ ID4gPiA+ID4gPiA+ID4gPiAgICAgICBzdHJ1Y3QgdnJpbmdfZGVzY19zdGF0ZV9wYWNrZWQgKmRl c2Nfc3RhdGU7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIHN0cnVjdCB2cmluZ19kZXNjX2V4dHJh ICpkZXNjX2V4dHJhOwo+ID4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiArICAgICAv KiBNYXhpbXVtIGluIGJ1ZmZlciBsZW5ndGgsIE5VTEwgbWVhbnMgbm8gdXNlZCB2YWxpZGF0aW9u ICovCj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgIHUzMiAqYnVmbGVuOwo+ID4gPiA+ID4gPiA+ID4g PiArCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIC8qIERNQSBhZGRyZXNzIGFuZCBzaXplIGluZm9y bWF0aW9uICovCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIGRtYV9hZGRyX3QgcmluZ19kbWFfYWRk cjsKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgZG1hX2FkZHJfdCBkcml2ZXJfZXZlbnRfZG1hX2Fk ZHI7Cj4gPiA+ID4gPiA+ID4gPiA+IEBAIC01NTIsNiArNTYxLDcgQEAgc3RhdGljIGlubGluZSBp bnQgdmlydHF1ZXVlX2FkZF9zcGxpdChzdHJ1Y3QgdmlydHF1ZXVlICpfdnEsCj4gPiA+ID4gPiA+ ID4gPiA+ICAgICAgIHVuc2lnbmVkIGludCBpLCBuLCBhdmFpbCwgZGVzY3NfdXNlZCwgcHJldiwg ZXJyX2lkeDsKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgaW50IGhlYWQ7Cj4gPiA+ID4gPiA+ID4g PiA+ICAgICAgIGJvb2wgaW5kaXJlY3Q7Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgIHUzMiBidWZs ZW4gPSAwOwo+ID4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICBTVEFSVF9V U0UodnEpOwo+ID4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiBAQCAtNjM1LDYgKzY0 NSw3IEBAIHN0YXRpYyBpbmxpbmUgaW50IHZpcnRxdWV1ZV9hZGRfc3BsaXQoc3RydWN0IHZpcnRx dWV1ZSAqX3ZxLAo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBWUklOR19ERVNDX0ZfTkVYVCB8Cj4gPiA+ID4gPiA+ID4g PiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFZS SU5HX0RFU0NfRl9XUklURSwKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaW5kaXJlY3QpOwo+ID4gPiA+ID4gPiA+ID4g PiArICAgICAgICAgICAgICAgICAgICAgYnVmbGVuICs9IHNnLT5sZW5ndGg7Cj4gPiA+ID4gPiA+ ID4gPiA+ICAgICAgICAgICAgICAgfQo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICB9Cj4gPiA+ID4g PiA+ID4gPiA+ICAgICAgIC8qIExhc3Qgb25lIGRvZXNuJ3QgY29udGludWUuICovCj4gPiA+ID4g PiA+ID4gPiA+IEBAIC02NzUsNiArNjg2LDEwIEBAIHN0YXRpYyBpbmxpbmUgaW50IHZpcnRxdWV1 ZV9hZGRfc3BsaXQoc3RydWN0IHZpcnRxdWV1ZSAqX3ZxLAo+ID4gPiA+ID4gPiA+ID4gPiAgICAg ICBlbHNlCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgdnEtPnNwbGl0LmRlc2Nfc3Rh dGVbaGVhZF0uaW5kaXJfZGVzYyA9IGN0eDsKPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4g PiA+ID4gKyAgICAgLyogU3RvcmUgaW4gYnVmZmVyIGxlbmd0aCBpZiBuZWNlc3NhcnkgKi8KPiA+ ID4gPiA+ID4gPiA+ID4gKyAgICAgaWYgKHZxLT5zcGxpdC5idWZsZW4pCj4gPiA+ID4gPiA+ID4g PiA+ICsgICAgICAgICAgICAgdnEtPnNwbGl0LmJ1ZmxlbltoZWFkXSA9IGJ1ZmxlbjsKPiA+ID4g PiA+ID4gPiA+ID4gKwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAvKiBQdXQgZW50cnkgaW4gYXZh aWxhYmxlIGFycmF5IChidXQgZG9uJ3QgdXBkYXRlIGF2YWlsLT5pZHggdW50aWwgdGhleQo+ID4g PiA+ID4gPiA+ID4gPiAgICAgICAgKiBkbyBzeW5jKS4gKi8KPiA+ID4gPiA+ID4gPiA+ID4gICAg ICAgYXZhaWwgPSB2cS0+c3BsaXQuYXZhaWxfaWR4X3NoYWRvdyAmICh2cS0+c3BsaXQudnJpbmcu bnVtIC0gMSk7Cj4gPiA+ID4gPiA+ID4gPiA+IEBAIC04NjEsNiArODc2LDExIEBAIHN0YXRpYyB2 b2lkICp2aXJ0cXVldWVfZ2V0X2J1Zl9jdHhfc3BsaXQoc3RydWN0IHZpcnRxdWV1ZSAqX3ZxLAo+ ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgIEJBRF9SSU5HKHZxLCAiaWQgJXUgaXMgbm90 IGEgaGVhZCFcbiIsIGkpOwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgIHJldHVybiBO VUxMOwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICB9Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgIGlm ICh2cS0+c3BsaXQuYnVmbGVuICYmIHVubGlrZWx5KCpsZW4gPiB2cS0+c3BsaXQuYnVmbGVuW2ld KSkgewo+ID4gPiA+ID4gPiA+ID4gPiArICAgICAgICAgICAgIEJBRF9SSU5HKHZxLCAidXNlZCBs ZW4gJWQgaXMgbGFyZ2VyIHRoYW4gbWF4IGluIGJ1ZmZlciBsZW4gJXVcbiIsCj4gPiA+ID4gPiA+ ID4gPiA+ICsgICAgICAgICAgICAgICAgICAgICAqbGVuLCB2cS0+c3BsaXQuYnVmbGVuW2ldKTsK PiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgICAgICAgICByZXR1cm4gTlVMTDsKPiA+ID4gPiA+ID4g PiA+ID4gKyAgICAgfQo+ID4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAv KiBkZXRhY2hfYnVmX3NwbGl0IGNsZWFycyBkYXRhLCBzbyBncmFiIGl0IG5vdy4gKi8KPiA+ID4g PiA+ID4gPiA+ID4gICAgICAgcmV0ID0gdnEtPnNwbGl0LmRlc2Nfc3RhdGVbaV0uZGF0YTsKPiA+ ID4gPiA+ID4gPiA+ID4gQEAgLTEwODUsMTAgKzExMDUsMjUgQEAgc3RhdGljIHZvaWQgdnJpbmdf ZnJlZV9zcGxpdChzdHJ1Y3QgdnJpbmdfdmlydHF1ZXVlX3NwbGl0ICp2cmluZ19zcGxpdCwKPiA+ ID4gPiA+ID4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAgICB2cmluZ19zcGxpdC0+cXVldWVf ZG1hX2FkZHIsCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAgICAgZG1hX2Rl dik7Cj4gPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgIGtmcmVlKHZyaW5n X3NwbGl0LT5idWZsZW4pOwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICBrZnJlZSh2cmluZ19zcGxp dC0+ZGVzY19zdGF0ZSk7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIGtmcmVlKHZyaW5nX3NwbGl0 LT5kZXNjX2V4dHJhKTsKPiA+ID4gPiA+ID4gPiA+ID4gIH0KPiA+ID4gPiA+ID4gPiA+ID4KPiA+ ID4gPiA+ID4gPiA+ID4gK3N0YXRpYyBib29sIHZyaW5nX25lZWRzX3VzZWRfdmFsaWRhdGlvbihj b25zdCBzdHJ1Y3QgdmlydGlvX2RldmljZSAqdmRldikKPiA+ID4gPiA+ID4gPiA+ID4gK3sKPiA+ ID4gPiA+ID4gPiA+ID4gKyAgICAgLyoKPiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgICogU2V2ZXJh bCBsZWdhY3kgZGV2aWNlcyBhcmUga25vd24gdG8gcHJvZHVjZSBidWdneSB1c2VkCj4gPiA+ID4g PiA+ID4gPiA+ICsgICAgICAqIGxlbmd0aC4gSW4gb3JkZXIgdG8gbGV0IGRyaXZlciB3b3JrLCB3 ZSB3b24ndCB2YWxpZGF0ZSB1c2VkCj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgICAqIGJ1ZmZlciBs ZW5ndGggaW4gdGhpcyBjYXNlLgo+ID4gPiA+ID4gPiA+ID4gPiArICAgICAgKi8KPiA+ID4gPiA+ ID4gPiA+ID4gKyAgICAgaWYgKCF2aXJ0aW9faGFzX2ZlYXR1cmUodmRldiwgVklSVElPX0ZfVkVS U0lPTl8xKSkKPiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgICAgICAgICByZXR1cm4gZmFsc2U7Cj4g PiA+ID4gPiA+ID4gPiA+ICsgICAgIGlmIChmb3JjZV91c2VkX3ZhbGlkYXRpb24pCj4gPiA+ID4g PiA+ID4gPiA+ICsgICAgICAgICAgICAgcmV0dXJuIHRydWU7Cj4gPiA+ID4gPiA+ID4gPiA+ICsg ICAgIHJldHVybiBmYWxzZTsKPiA+ID4gPiA+ID4gPiA+ID4gK30KPiA+ID4gPiA+ID4gPiA+ID4g Kwo+ID4gPiA+ID4gPiA+ID4gPiAgc3RhdGljIGludCB2cmluZ19hbGxvY19xdWV1ZV9zcGxpdChz dHJ1Y3QgdnJpbmdfdmlydHF1ZXVlX3NwbGl0ICp2cmluZ19zcGxpdCwKPiA+ID4gPiA+ID4gPiA+ ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgc3RydWN0IHZpcnRpb19kZXZpY2Ug KnZkZXYsCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IHUzMiBudW0sCj4gPiA+ID4gPiA+ID4gPiA+IEBAIC0xMTM3LDcgKzExNzIsMTkgQEAgc3RhdGlj IGludCB2cmluZ19hbGxvY19xdWV1ZV9zcGxpdChzdHJ1Y3QgdnJpbmdfdmlydHF1ZXVlX3NwbGl0 ICp2cmluZ19zcGxpdCwKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgdnJpbmdfc3BsaXQtPnZyaW5n X2FsaWduID0gdnJpbmdfYWxpZ247Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIHZyaW5nX3NwbGl0 LT5tYXlfcmVkdWNlX251bSA9IG1heV9yZWR1Y2VfbnVtOwo+ID4gPiA+ID4gPiA+ID4gPgo+ID4g PiA+ID4gPiA+ID4gPiArICAgICBpZiAodnJpbmdfbmVlZHNfdXNlZF92YWxpZGF0aW9uKHZkZXYp KSB7Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgICAgICAgICAgdnJpbmdfc3BsaXQtPmJ1ZmxlbiA9 Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgICAgICAgICAgICAgICAgICBrbWFsbG9jX2FycmF5KG51 bSwgc2l6ZW9mKCp2cmluZ19zcGxpdC0+YnVmbGVuKSwKPiA+ID4gPiA+ID4gPiA+ID4gKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgR0ZQX0tFUk5FTCk7Cj4gPiA+ID4gPiA+ID4g PiA+ICsgICAgICAgICAgICAgaWYgKCF2cmluZ19zcGxpdC0+YnVmbGVuKQo+ID4gPiA+ID4gPiA+ ID4gPiArICAgICAgICAgICAgICAgICAgICAgZ290byBlcnJfYnVmbGVuOwo+ID4gPiA+ID4gPiA+ ID4gPiArICAgICB9Cj4gPiA+ID4gPiA+ID4gPiA+ICsKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAg cmV0dXJuIDA7Cj4gPiA+ID4gPiA+ID4gPiA+ICsKPiA+ID4gPiA+ID4gPiA+ID4gK2Vycl9idWZs ZW46Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgIHZyaW5nX2ZyZWVfc3BsaXQodnJpbmdfc3BsaXQs IHZkZXYsIGRtYV9kZXYpOwo+ID4gPiA+ID4gPiA+ID4gPiArICAgICByZXR1cm4gLUVOT01FTTsK PiA+ID4gPiA+ID4gPiA+ID4gIH0KPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4g IHN0YXRpYyBzdHJ1Y3QgdmlydHF1ZXVlICp2cmluZ19jcmVhdGVfdmlydHF1ZXVlX3NwbGl0KAo+ ID4gPiA+ID4gPiA+ID4gPiBAQCAtMTI5Nyw2ICsxMzQ0LDcgQEAgc3RhdGljIGludCB2aXJ0cXVl dWVfYWRkX2luZGlyZWN0X3BhY2tlZChzdHJ1Y3QgdnJpbmdfdmlydHF1ZXVlICp2cSwKPiA+ID4g PiA+ID4gPiA+ID4gICAgICAgdW5zaWduZWQgaW50IGksIG4sIGVycl9pZHg7Cj4gPiA+ID4gPiA+ ID4gPiA+ICAgICAgIHUxNiBoZWFkLCBpZDsKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgZG1hX2Fk ZHJfdCBhZGRyOwo+ID4gPiA+ID4gPiA+ID4gPiArICAgICB1MzIgYnVmbGVuID0gMDsKPiA+ID4g PiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgaGVhZCA9IHZxLT5wYWNrZWQubmV4 dF9hdmFpbF9pZHg7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIGRlc2MgPSBhbGxvY19pbmRpcmVj dF9wYWNrZWQodG90YWxfc2csIGdmcCk7Cj4gPiA+ID4gPiA+ID4gPiA+IEBAIC0xMzI1LDYgKzEz NzMsOCBAQCBzdGF0aWMgaW50IHZpcnRxdWV1ZV9hZGRfaW5kaXJlY3RfcGFja2VkKHN0cnVjdCB2 cmluZ192aXJ0cXVldWUgKnZxLAo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAg ICAgZGVzY1tpXS5hZGRyID0gY3B1X3RvX2xlNjQoYWRkcik7Cj4gPiA+ID4gPiA+ID4gPiA+ICAg ICAgICAgICAgICAgICAgICAgICBkZXNjW2ldLmxlbiA9IGNwdV90b19sZTMyKHNnLT5sZW5ndGgp Owo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgaSsrOwo+ID4gPiA+ID4g PiA+ID4gPiArICAgICAgICAgICAgICAgICAgICAgaWYgKG4gPj0gb3V0X3NncykKPiA+ID4gPiA+ ID4gPiA+ID4gKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYnVmbGVuICs9IHNnLT5sZW5n dGg7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgfQo+ID4gPiA+ID4gPiA+ID4gPiAg ICAgICB9Cj4gPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiA+IEBAIC0xMzc5LDYgKzE0 MjksMTAgQEAgc3RhdGljIGludCB2aXJ0cXVldWVfYWRkX2luZGlyZWN0X3BhY2tlZChzdHJ1Y3Qg dnJpbmdfdmlydHF1ZXVlICp2cSwKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgdnEtPnBhY2tlZC5k ZXNjX3N0YXRlW2lkXS5sYXN0ID0gaWQ7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIHZxLT5wYWNr ZWQuZGVzY19zdGF0ZVtpZF0ucHJlbWFwcGVkID0gcHJlbWFwcGVkOwo+ID4gPiA+ID4gPiA+ID4g Pgo+ID4gPiA+ID4gPiA+ID4gPiArICAgICAvKiBTdG9yZSBpbiBidWZmZXIgbGVuZ3RoIGlmIG5l Y2Vzc2FyeSAqLwo+ID4gPiA+ID4gPiA+ID4gPiArICAgICBpZiAodnEtPnBhY2tlZC5idWZsZW4p Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAgICAgICAgICAgdnEtPnBhY2tlZC5idWZsZW5baWRdID0g YnVmbGVuOwo+ID4gPiA+ID4gPiA+ID4gPiArCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIHZxLT5u dW1fYWRkZWQgKz0gMTsKPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gICAgICAg cHJfZGVidWcoIkFkZGVkIGJ1ZmZlciBoZWFkICVpIHRvICVwXG4iLCBoZWFkLCB2cSk7Cj4gPiA+ ID4gPiA+ID4gPiA+IEBAIC0xNDE2LDYgKzE0NzAsNyBAQCBzdGF0aWMgaW5saW5lIGludCB2aXJ0 cXVldWVfYWRkX3BhY2tlZChzdHJ1Y3QgdmlydHF1ZXVlICpfdnEsCj4gPiA+ID4gPiA+ID4gPiA+ ICAgICAgIF9fbGUxNiBoZWFkX2ZsYWdzLCBmbGFnczsKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAg dTE2IGhlYWQsIGlkLCBwcmV2LCBjdXJyLCBhdmFpbF91c2VkX2ZsYWdzOwo+ID4gPiA+ID4gPiA+ ID4gPiAgICAgICBpbnQgZXJyOwo+ID4gPiA+ID4gPiA+ID4gPiArICAgICB1MzIgYnVmbGVuID0g MDsKPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgU1RBUlRfVVNFKHZx KTsKPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gQEAgLTE0OTgsNiArMTU1Myw4 IEBAIHN0YXRpYyBpbmxpbmUgaW50IHZpcnRxdWV1ZV9hZGRfcGFja2VkKHN0cnVjdCB2aXJ0cXVl dWUgKl92cSwKPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAxIDw8IFZSSU5HX1BBQ0tFRF9ERVNDX0ZfQVZBSUwgfAo+ID4gPiA+ID4gPiA+ID4g PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDEgPDwgVlJJTkdfUEFDS0VE X0RFU0NfRl9VU0VEOwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgfQo+ ID4gPiA+ID4gPiA+ID4gPiArICAgICAgICAgICAgICAgICAgICAgaWYgKG4gPj0gb3V0X3NncykK PiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYnVmbGVuICs9 IHNnLT5sZW5ndGg7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgfQo+ID4gPiA+ID4g PiA+ID4gPiAgICAgICB9Cj4gPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiA+IEBAIC0x NTE4LDYgKzE1NzUsMTAgQEAgc3RhdGljIGlubGluZSBpbnQgdmlydHF1ZXVlX2FkZF9wYWNrZWQo c3RydWN0IHZpcnRxdWV1ZSAqX3ZxLAo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICB2cS0+cGFja2Vk LmRlc2Nfc3RhdGVbaWRdLmxhc3QgPSBwcmV2Owo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICB2cS0+ cGFja2VkLmRlc2Nfc3RhdGVbaWRdLnByZW1hcHBlZCA9IHByZW1hcHBlZDsKPiA+ID4gPiA+ID4g PiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgLyogU3RvcmUgaW4gYnVmZmVyIGxlbmd0aCBp ZiBuZWNlc3NhcnkgKi8KPiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgaWYgKHZxLT5wYWNrZWQuYnVm bGVuKQo+ID4gPiA+ID4gPiA+ID4gPiArICAgICAgICAgICAgIHZxLT5wYWNrZWQuYnVmbGVuW2lk XSA9IGJ1ZmxlbjsKPiA+ID4gPiA+ID4gPiA+ID4gKwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAv Kgo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICAgKiBBIGRyaXZlciBNVVNUIE5PVCBtYWtlIHRoZSBm aXJzdCBkZXNjcmlwdG9yIGluIHRoZSBsaXN0Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAqIGF2 YWlsYWJsZSBiZWZvcmUgYWxsIHN1YnNlcXVlbnQgZGVzY3JpcHRvcnMgY29tcHJpc2luZwo+ID4g PiA+ID4gPiA+ID4gPiBAQCAtMTcxOCw2ICsxNzc5LDExIEBAIHN0YXRpYyB2b2lkICp2aXJ0cXVl dWVfZ2V0X2J1Zl9jdHhfcGFja2VkKHN0cnVjdCB2aXJ0cXVldWUgKl92cSwKPiA+ID4gPiA+ID4g PiA+ID4gICAgICAgICAgICAgICBCQURfUklORyh2cSwgImlkICV1IGlzIG5vdCBhIGhlYWQhXG4i LCBpZCk7Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAgcmV0dXJuIE5VTEw7Cj4gPiA+ ID4gPiA+ID4gPiA+ICAgICAgIH0KPiA+ID4gPiA+ID4gPiA+ID4gKyAgICAgaWYgKHZxLT5wYWNr ZWQuYnVmbGVuICYmIHVubGlrZWx5KCpsZW4gPiB2cS0+cGFja2VkLmJ1ZmxlbltpZF0pKSB7Cj4g PiA+ID4gPiA+ID4gPiA+ICsgICAgICAgICAgICAgQkFEX1JJTkcodnEsICJ1c2VkIGxlbiAlZCBp cyBsYXJnZXIgdGhhbiBtYXggaW4gYnVmZmVyIGxlbiAldVxuIiwKPiA+ID4gPiA+ID4gPiA+ID4g KyAgICAgICAgICAgICAgICAgICAgICpsZW4sIHZxLT5wYWNrZWQuYnVmbGVuW2lkXSk7Cj4gPiA+ ID4gPiA+ID4gPiA+ICsgICAgICAgICAgICAgcmV0dXJuIE5VTEw7Cj4gPiA+ID4gPiA+ID4gPiA+ ICsgICAgIH0KPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gICAgICAgLyogZGV0 YWNoX2J1Zl9wYWNrZWQgY2xlYXJzIGRhdGEsIHNvIGdyYWIgaXQgbm93LiAqLwo+ID4gPiA+ID4g PiA+ID4gPiAgICAgICByZXQgPSB2cS0+cGFja2VkLmRlc2Nfc3RhdGVbaWRdLmRhdGE7Cj4gPiA+ ID4gPiA+ID4gPiA+IEBAIC0xOTM3LDYgKzIwMDMsNyBAQCBzdGF0aWMgdm9pZCB2cmluZ19mcmVl X3BhY2tlZChzdHJ1Y3QgdnJpbmdfdmlydHF1ZXVlX3BhY2tlZCAqdnJpbmdfcGFja2VkLAo+ID4g PiA+ID4gPiA+ID4gPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgdnJpbmdfcGFja2Vk LT5kZXZpY2VfZXZlbnRfZG1hX2FkZHIsCj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBkbWFfZGV2KTsKPiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4g PiA+ID4gKyAgICAga2ZyZWUodnJpbmdfcGFja2VkLT5idWZsZW4pOwo+ID4gPiA+ID4gPiA+ID4g PiAgICAgICBrZnJlZSh2cmluZ19wYWNrZWQtPmRlc2Nfc3RhdGUpOwo+ID4gPiA+ID4gPiA+ID4g PiAgICAgICBrZnJlZSh2cmluZ19wYWNrZWQtPmRlc2NfZXh0cmEpOwo+ID4gPiA+ID4gPiA+ID4g PiAgfQo+ID4gPiA+ID4gPiA+ID4gPiBAQCAtMTk4OCw2ICsyMDU1LDE0IEBAIHN0YXRpYyBpbnQg dnJpbmdfYWxsb2NfcXVldWVfcGFja2VkKHN0cnVjdCB2cmluZ192aXJ0cXVldWVfcGFja2VkICp2 cmluZ19wYWNrZWQsCj4gPiA+ID4gPiA+ID4gPiA+Cj4gPiA+ID4gPiA+ID4gPiA+ICAgICAgIHZy aW5nX3BhY2tlZC0+dnJpbmcubnVtID0gbnVtOwo+ID4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4g PiA+ID4gPiArICAgICBpZiAodnJpbmdfbmVlZHNfdXNlZF92YWxpZGF0aW9uKHZkZXYpKSB7Cj4g PiA+ID4gPiA+ID4gPiA+ICsgICAgICAgICAgICAgdnJpbmdfcGFja2VkLT5idWZsZW4gPQo+ID4g PiA+ID4gPiA+ID4gPiArICAgICAgICAgICAgICAgICAgICAga21hbGxvY19hcnJheShudW0sIHNp emVvZigqdnJpbmdfcGFja2VkLT5idWZsZW4pLAo+ID4gPiA+ID4gPiA+ID4gPiArICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBHRlBfS0VSTkVMKTsKPiA+ID4gPiA+ID4gPiA+ID4g KyAgICAgICAgICAgICBpZiAoIXZyaW5nX3BhY2tlZC0+YnVmbGVuKQo+ID4gPiA+ID4gPiA+ID4g PiArICAgICAgICAgICAgICAgICAgICAgZ290byBlcnI7Cj4gPiA+ID4gPiA+ID4gPiA+ICsgICAg IH0KPiA+ID4gPiA+ID4gPiA+ID4gKwo+ID4gPiA+ID4gPiA+ID4gPiAgICAgICByZXR1cm4gMDsK PiA+ID4gPiA+ID4gPiA+ID4KPiA+ID4gPiA+ID4gPiA+ID4gIGVycjoKPiA+ID4gPiA+ID4gPiA+ ID4gLS0KPiA+ID4gPiA+ID4gPiA+ID4gMi4yNS4xCj4gPiA+ID4gPiA+ID4gPgo+ID4gPiA+ID4g Pgo+ID4gPiA+Cj4gPgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KVmlydHVhbGl6YXRpb24gbWFpbGluZyBsaXN0ClZpcnR1YWxpemF0aW9uQGxpc3RzLmxp bnV4LWZvdW5kYXRpb24ub3JnCmh0dHBzOi8vbGlzdHMubGludXhmb3VuZGF0aW9uLm9yZy9tYWls bWFuL2xpc3RpbmZvL3ZpcnR1YWxpemF0aW9u From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4DFDBC77B7A for ; Thu, 1 Jun 2023 03:35:45 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231136AbjFADfn (ORCPT ); Wed, 31 May 2023 23:35:43 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:53218 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229799AbjFADfk (ORCPT ); Wed, 31 May 2023 23:35:40 -0400 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 79C8A124 for ; Wed, 31 May 2023 20:34:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1685590488; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=jPis8nJbphrb4gqqhUZ5tZna31GQutP+PtzpROegkuM=; b=hT9y5rUdECbGp5GCTtxCVfAjcImnhDOjfmvvFqrl4rzA8slfTkcC/6dMs/Ge9Qavyk9QsW SoxZbxopgHX7KG9SaNgy5NBGmEpMRvNfKNOUgVJWDcufskKKcbN7uj5K0iKChvkSAjgwCK tTdUcc8tj63317tLzLBAppsBOsxQHtA= Received: from mail-wr1-f70.google.com (mail-wr1-f70.google.com [209.85.221.70]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-385-K_yv8wGZO3SCvvjxm4LVCQ-1; Wed, 31 May 2023 23:34:45 -0400 X-MC-Unique: K_yv8wGZO3SCvvjxm4LVCQ-1 Received: by mail-wr1-f70.google.com with SMTP id ffacd0b85a97d-30ab548ba06so480311f8f.1 for ; Wed, 31 May 2023 20:34:45 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1685590484; x=1688182484; h=in-reply-to:content-transfer-encoding:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=jPis8nJbphrb4gqqhUZ5tZna31GQutP+PtzpROegkuM=; b=YN9xhnwpVafRlcyd1i+5RsY8VQJcpiQ3W2uPIUH50L2hWWpPA+7sJGQt2L/A4UBdkJ xyWc/+9Q5EHqM4GJGDukHHBKfXoy867Tctj2zSfVkVK0qy4E+Chp+A5yw79dX8kAT/n3 +8vSlSEJ2CD+6BO/HATr0jVXR8EqFJ9T1MaJMyeNgPNpnhD65HLxi1ZNgnP0stvkck0k KMNRv3PAq5amKllRGkbcP26nIWAKDfTZho21EnDv8mwRdMxuaKT8KtEt3hJfL8Qz7HfV vIIhr+zFo9C2gYlCp4L7/SpYUgL3oRKyMXOif0CIaIc7VE8hk5MHAk7s6LNrp8+3h2uW WW9A== X-Gm-Message-State: AC+VfDynn4UR9W/k/dsUoniqAxpvbaOP/sNQXUknIenWyxQNTeLkX5XX uuo1FkCH9tkPvEinQdq3MalZLZ5lMyAmtQz5wu+3rZx+Z2BqVVDjjGi7IlPP94gmlDdu92Dr+7t i6B8fZYxilu9tC5dyNq/3YMDe X-Received: by 2002:adf:fec2:0:b0:309:48ec:2c82 with SMTP id q2-20020adffec2000000b0030948ec2c82mr895140wrs.48.1685590483975; Wed, 31 May 2023 20:34:43 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ5d0JL4IrMcOOgir++EfIl95brEk7rWDkUAFkiy/+XMcw5NXm7ksmTQIe1VmkclOiJduiDyrw== X-Received: by 2002:adf:fec2:0:b0:309:48ec:2c82 with SMTP id q2-20020adffec2000000b0030948ec2c82mr895130wrs.48.1685590483533; Wed, 31 May 2023 20:34:43 -0700 (PDT) Received: from redhat.com ([2.52.143.63]) by smtp.gmail.com with ESMTPSA id b10-20020adfee8a000000b0030aefd11892sm8481214wro.41.2023.05.31.20.34.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 31 May 2023 20:34:42 -0700 (PDT) Date: Wed, 31 May 2023 23:34:39 -0400 From: "Michael S. Tsirkin" To: Jason Wang Cc: xuanzhuo@linux.alibaba.com, virtualization@lists.linux-foundation.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] virtio_ring: validate used buffer length Message-ID: <20230531233332-mutt-send-email-mst@kernel.org> References: <20230526063041.18359-1-jasowang@redhat.com> <20230528033037-mutt-send-email-mst@kernel.org> <20230529055729-mutt-send-email-mst@kernel.org> <20230531014326-mutt-send-email-mst@kernel.org> <20230531053001-mutt-send-email-mst@kernel.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Jun 01, 2023 at 09:12:53AM +0800, Jason Wang wrote: > On Wed, May 31, 2023 at 5:55 PM Michael S. Tsirkin wrote: > > > > On Wed, May 31, 2023 at 03:36:51PM +0800, Jason Wang wrote: > > > On Wed, May 31, 2023 at 1:50 PM Michael S. Tsirkin wrote: > > > > > > > > On Wed, May 31, 2023 at 09:05:00AM +0800, Jason Wang wrote: > > > > > On Mon, May 29, 2023 at 6:03 PM Michael S. Tsirkin wrote: > > > > > > > > > > > > On Mon, May 29, 2023 at 09:18:10AM +0800, Jason Wang wrote: > > > > > > > On Sun, May 28, 2023 at 3:57 PM Michael S. Tsirkin wrote: > > > > > > > > > > > > > > > > On Fri, May 26, 2023 at 02:30:41PM +0800, Jason Wang wrote: > > > > > > > > > This patch validate > > > > > > > > > > > > > > > > validates > > > > > > > > > > > > > > > > > the used buffer length provided by the device > > > > > > > > > before trying to use it. > > > > > > > > > > > > > > > > before returning it to caller > > > > > > > > > > > > > > > > > This is done by remembering the in buffer > > > > > > > > > length in a dedicated array during virtqueue_add(), then we can fail > > > > > > > > > the virtqueue_get_buf() when we find the device is trying to give us a > > > > > > > > > used buffer length which is greater than we stored before. > > > > > > > > > > > > > > > > than what we stored > > > > > > > > > > > > > > > > > > > > > > > > > > This validation is disable > > > > > > > > > > > > > > > > disabled > > > > > > > > > > > > > > > > > by default via module parameter to unbreak > > > > > > > > > some existing devices since some legacy devices are known to report > > > > > > > > > buggy used length. > > > > > > > > > > > > > > > > > > Signed-off-by: Jason Wang > > > > > > > > > > > > > > > > First I'm not merging this without more data about > > > > > > > > what is known to be broken and what is known to work well > > > > > > > > in the commit log. And how exactly do things work if used length > > > > > > > > is wrong? > > > > > > > > > > > > > > Assuming the device is malicious, it would be very hard to answer. > > > > > > > Auditing and fuzzing won't cover every case. Instead of trying to seek > > > > > > > the answer, we can simply make sure the used in buffer length is > > > > > > > validated then we know we're fine or not. > > > > > > > > > > > > To restate the question, you said above "some legacy devices are known > > > > > > to report buggy used length". If they report buggy length then how > > > > > > can things work? > > > > > > > > > > The validation is disabled for legacy device (as stated in the changelog): > > > > > > > > > > static bool vring_needs_used_validation(const struct virtio_device *vdev) > > > > > { > > > > > /* > > > > > * Several legacy devices are known to produce buggy used > > > > > * length. In order to let driver work, we won't validate used > > > > > * buffer length in this case. > > > > > */ > > > > > if (!virtio_has_feature(vdev, VIRTIO_F_VERSION_1)) > > > > > return false; > > > > > if (force_used_validation) > > > > > return true; > > > > > return false; > > > > > } > > > > > > > > > > This seems to be what we've agreed in last version: > > > > > > > > > > https://lore.kernel.org/all/CANLsYkxfhamUU0bb4j7y6N4_G9odKxLCjXxgXEx4SJ6_Kf+M2Q@mail.gmail.com/T/#m31f3b06f9032beec175c312dfa2532cb08b15c56 > > > > > > > > > > Thanks > > > > > > > > > > > > > I don't get it. You wrote: > > > > > > > > This validation is disable > > > > by default via module parameter to unbreak > > > > some existing devices since some legacy devices are known to report > > > > buggy used length. > > > > > > > > which devices? > > > > > > legacy rpmsg and vsock device (before 49d8c5ffad07) at least. > > > > > > > why do you need a module parameter? > > > > > > If we enable it unconditionally for modern devices, it may break some > > > buggy moden device (vsock without a fix as an example). > > > > Presumably this happens because vsock does not have any inbuf at all > > so it ignores the length. > > We had the same with virtio net tx a long time ago. > > > > My suggestion is then not to fail - just cap length at the dma length > > set by driver. Another idea is that if dma len is 0 then don't validate > > at all - driver that did not add any inbufs is not going to look > > at length. > > > > Allowing passing NULL as length and skipping validation > > if len = 0 might also be a good idea. > > The above should work for sure, but a question is, in the case of > confidential computing, if a driver detects a malicious device, is it > really good to try to keep working or warn and disable the device? Or > maybe we can have an option for the user to decide? A minor bug in an unused field is not worth panicing about. > > > > > > > > > > > > > > > > > > > > > > > > > > Second what's wrong with dma_desc_extra that we already maintain? > > > > > > > > Third motivation - it's part and parcel of the hardening effort yes? > > > > > > > > > > > > > > They are different. dma_desc_extra is for a descriptor ring, but this > > > > > > > is for a used ring. Technically we can go back to iterate on the > > > > > > > descriptor ring for a legal used in buffer length. But it will have > > > > > > > worse performance. > > > > > > > > > > > > I don't really understand. We already iterate when we unmap - > > > > > > all that is necessary is to subtract it from used length, if at > > > > > > the end of the process it is >0 then we know used length is too > > > > > > large. > > > > > > > > > > Yes, but it is the job that is done in the driver level not the virtio > > > > > core. > > > > > > > > What job? > > > > > > I meant the driver can do the validation since it has the knowledge of > > > the buffer length if it wants. > > > > It does not necessarily have it - not if virtio is doing DMA > > mapping. > > I don't see any dependencies for DMA, I mean anyhow the in buffer is > allocated by the driver, so it should know how large it is. > > > > > > > > > unmap is done in detach_buf_split and detach_buf_packed respectively. > > > > vring_desc_extra isn't even visible outside drivers/virtio/virtio_ring.c > > > > > > desc_extra doesn't contain buffer length for the case of indirect > > > descriptors. So we need to iterate in the descriptors when it looks > > > expensive if we don't need unmap. > > > > > > Thanks > > > > Well at the moment we only don't unmap if DMA API is bypassed. > > If I understand correctly, we will probably support premapped DMA > buffers soon (AF_XDP and page pool)? > > Thanks > > > And then > > we don't need to validate length either. Fundamentally, without > > ACCESS_PLATFORM device is trusted. > > > > > > > > > > > > For drivers that do unmap at driver level - I guess they can do > > > > validation there too. > > > > > > > > > Validation in virtio core is still necessary since they're > > > > > working at different levels and it's hard to force the validation in > > > > > all drivers by codes. Last version introduces a > > > > > suppress_driver_validation to allow the driver to suppress the core > > > > > validation which seems not good, we need a way to force the > > > > > virtio_ring code to do validation before. > > > > > > > > Why do we? If driver validates length virtio_ring does not need to > > > > validate. If driver does not use length virtio_ring does not need to > > > > validate. core can provide this service for the gazillion non > > > > performance critical drivers that just want to keep things simple, > > > > but the 4-5 critical ones can do their own validation if they want to. > > > > > > > > > Or such stuff could be added > > > > > on top since the validation is by default anyway. > > > > > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I'd like to know the fate of VIRTIO_HARDEN_NOTIFICATION before > > > > > > > > we do more hardening. If it's irrevocably broken let's rip it out? > > > > > > > > > > > > > > So the plan is > > > > > > > > > > > > > > 1) finish used ring validation (this had been proposed, merged and > > > > > > > reverted before notification hardening) > > > > > > > 2) do notification hardening on top. > > > > > > > > > > > > > > So let's leave it as is and I will do a rework after we finalize the > > > > > > > used ring validation. > > > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --- > > > > > > > > > Changes since V4: > > > > > > > > > - drop the flat for driver to suppress the check > > > > > > > > > - validation is disabled by default > > > > > > > > > - don't do validation for legacy device > > > > > > > > > - rebase and support virtqueue resize > > > > > > > > > --- > > > > > > > > > drivers/virtio/virtio_ring.c | 75 ++++++++++++++++++++++++++++++++++++ > > > > > > > > > 1 file changed, 75 insertions(+) > > > > > > > > > > > > > > > > > > diff --git a/drivers/virtio/virtio_ring.c b/drivers/virtio/virtio_ring.c > > > > > > > > > index 143f380baa1c..5b151605aaf8 100644 > > > > > > > > > --- a/drivers/virtio/virtio_ring.c > > > > > > > > > +++ b/drivers/virtio/virtio_ring.c > > > > > > > > > @@ -15,6 +15,9 @@ > > > > > > > > > #include > > > > > > > > > #include > > > > > > > > > > > > > > > > > > +static bool force_used_validation = false; > > > > > > > > > +module_param(force_used_validation, bool, 0444); > > > > > > > > > + > > > > > > > > > #ifdef DEBUG > > > > > > > > > /* For development, we want to crash whenever the ring is screwed. */ > > > > > > > > > #define BAD_RING(_vq, fmt, args...) \ > > > > > > > > > @@ -105,6 +108,9 @@ struct vring_virtqueue_split { > > > > > > > > > struct vring_desc_state_split *desc_state; > > > > > > > > > struct vring_desc_extra *desc_extra; > > > > > > > > > > > > > > > > > > + /* Maximum in buffer length, NULL means no used validation */ > > > > > > > > > + u32 *buflen; > > > > > > > > > + > > > > > > > > > /* DMA address and size information */ > > > > > > > > > dma_addr_t queue_dma_addr; > > > > > > > > > size_t queue_size_in_bytes; > > > > > > > > > @@ -145,6 +151,9 @@ struct vring_virtqueue_packed { > > > > > > > > > struct vring_desc_state_packed *desc_state; > > > > > > > > > struct vring_desc_extra *desc_extra; > > > > > > > > > > > > > > > > > > + /* Maximum in buffer length, NULL means no used validation */ > > > > > > > > > + u32 *buflen; > > > > > > > > > + > > > > > > > > > /* DMA address and size information */ > > > > > > > > > dma_addr_t ring_dma_addr; > > > > > > > > > dma_addr_t driver_event_dma_addr; > > > > > > > > > @@ -552,6 +561,7 @@ static inline int virtqueue_add_split(struct virtqueue *_vq, > > > > > > > > > unsigned int i, n, avail, descs_used, prev, err_idx; > > > > > > > > > int head; > > > > > > > > > bool indirect; > > > > > > > > > + u32 buflen = 0; > > > > > > > > > > > > > > > > > > START_USE(vq); > > > > > > > > > > > > > > > > > > @@ -635,6 +645,7 @@ static inline int virtqueue_add_split(struct virtqueue *_vq, > > > > > > > > > VRING_DESC_F_NEXT | > > > > > > > > > VRING_DESC_F_WRITE, > > > > > > > > > indirect); > > > > > > > > > + buflen += sg->length; > > > > > > > > > } > > > > > > > > > } > > > > > > > > > /* Last one doesn't continue. */ > > > > > > > > > @@ -675,6 +686,10 @@ static inline int virtqueue_add_split(struct virtqueue *_vq, > > > > > > > > > else > > > > > > > > > vq->split.desc_state[head].indir_desc = ctx; > > > > > > > > > > > > > > > > > > + /* Store in buffer length if necessary */ > > > > > > > > > + if (vq->split.buflen) > > > > > > > > > + vq->split.buflen[head] = buflen; > > > > > > > > > + > > > > > > > > > /* Put entry in available array (but don't update avail->idx until they > > > > > > > > > * do sync). */ > > > > > > > > > avail = vq->split.avail_idx_shadow & (vq->split.vring.num - 1); > > > > > > > > > @@ -861,6 +876,11 @@ static void *virtqueue_get_buf_ctx_split(struct virtqueue *_vq, > > > > > > > > > BAD_RING(vq, "id %u is not a head!\n", i); > > > > > > > > > return NULL; > > > > > > > > > } > > > > > > > > > + if (vq->split.buflen && unlikely(*len > vq->split.buflen[i])) { > > > > > > > > > + BAD_RING(vq, "used len %d is larger than max in buffer len %u\n", > > > > > > > > > + *len, vq->split.buflen[i]); > > > > > > > > > + return NULL; > > > > > > > > > + } > > > > > > > > > > > > > > > > > > /* detach_buf_split clears data, so grab it now. */ > > > > > > > > > ret = vq->split.desc_state[i].data; > > > > > > > > > @@ -1085,10 +1105,25 @@ static void vring_free_split(struct vring_virtqueue_split *vring_split, > > > > > > > > > vring_split->queue_dma_addr, > > > > > > > > > dma_dev); > > > > > > > > > > > > > > > > > > + kfree(vring_split->buflen); > > > > > > > > > kfree(vring_split->desc_state); > > > > > > > > > kfree(vring_split->desc_extra); > > > > > > > > > } > > > > > > > > > > > > > > > > > > +static bool vring_needs_used_validation(const struct virtio_device *vdev) > > > > > > > > > +{ > > > > > > > > > + /* > > > > > > > > > + * Several legacy devices are known to produce buggy used > > > > > > > > > + * length. In order to let driver work, we won't validate used > > > > > > > > > + * buffer length in this case. > > > > > > > > > + */ > > > > > > > > > + if (!virtio_has_feature(vdev, VIRTIO_F_VERSION_1)) > > > > > > > > > + return false; > > > > > > > > > + if (force_used_validation) > > > > > > > > > + return true; > > > > > > > > > + return false; > > > > > > > > > +} > > > > > > > > > + > > > > > > > > > static int vring_alloc_queue_split(struct vring_virtqueue_split *vring_split, > > > > > > > > > struct virtio_device *vdev, > > > > > > > > > u32 num, > > > > > > > > > @@ -1137,7 +1172,19 @@ static int vring_alloc_queue_split(struct vring_virtqueue_split *vring_split, > > > > > > > > > vring_split->vring_align = vring_align; > > > > > > > > > vring_split->may_reduce_num = may_reduce_num; > > > > > > > > > > > > > > > > > > + if (vring_needs_used_validation(vdev)) { > > > > > > > > > + vring_split->buflen = > > > > > > > > > + kmalloc_array(num, sizeof(*vring_split->buflen), > > > > > > > > > + GFP_KERNEL); > > > > > > > > > + if (!vring_split->buflen) > > > > > > > > > + goto err_buflen; > > > > > > > > > + } > > > > > > > > > + > > > > > > > > > return 0; > > > > > > > > > + > > > > > > > > > +err_buflen: > > > > > > > > > + vring_free_split(vring_split, vdev, dma_dev); > > > > > > > > > + return -ENOMEM; > > > > > > > > > } > > > > > > > > > > > > > > > > > > static struct virtqueue *vring_create_virtqueue_split( > > > > > > > > > @@ -1297,6 +1344,7 @@ static int virtqueue_add_indirect_packed(struct vring_virtqueue *vq, > > > > > > > > > unsigned int i, n, err_idx; > > > > > > > > > u16 head, id; > > > > > > > > > dma_addr_t addr; > > > > > > > > > + u32 buflen = 0; > > > > > > > > > > > > > > > > > > head = vq->packed.next_avail_idx; > > > > > > > > > desc = alloc_indirect_packed(total_sg, gfp); > > > > > > > > > @@ -1325,6 +1373,8 @@ static int virtqueue_add_indirect_packed(struct vring_virtqueue *vq, > > > > > > > > > desc[i].addr = cpu_to_le64(addr); > > > > > > > > > desc[i].len = cpu_to_le32(sg->length); > > > > > > > > > i++; > > > > > > > > > + if (n >= out_sgs) > > > > > > > > > + buflen += sg->length; > > > > > > > > > } > > > > > > > > > } > > > > > > > > > > > > > > > > > > @@ -1379,6 +1429,10 @@ static int virtqueue_add_indirect_packed(struct vring_virtqueue *vq, > > > > > > > > > vq->packed.desc_state[id].last = id; > > > > > > > > > vq->packed.desc_state[id].premapped = premapped; > > > > > > > > > > > > > > > > > > + /* Store in buffer length if necessary */ > > > > > > > > > + if (vq->packed.buflen) > > > > > > > > > + vq->packed.buflen[id] = buflen; > > > > > > > > > + > > > > > > > > > vq->num_added += 1; > > > > > > > > > > > > > > > > > > pr_debug("Added buffer head %i to %p\n", head, vq); > > > > > > > > > @@ -1416,6 +1470,7 @@ static inline int virtqueue_add_packed(struct virtqueue *_vq, > > > > > > > > > __le16 head_flags, flags; > > > > > > > > > u16 head, id, prev, curr, avail_used_flags; > > > > > > > > > int err; > > > > > > > > > + u32 buflen = 0; > > > > > > > > > > > > > > > > > > START_USE(vq); > > > > > > > > > > > > > > > > > > @@ -1498,6 +1553,8 @@ static inline int virtqueue_add_packed(struct virtqueue *_vq, > > > > > > > > > 1 << VRING_PACKED_DESC_F_AVAIL | > > > > > > > > > 1 << VRING_PACKED_DESC_F_USED; > > > > > > > > > } > > > > > > > > > + if (n >= out_sgs) > > > > > > > > > + buflen += sg->length; > > > > > > > > > } > > > > > > > > > } > > > > > > > > > > > > > > > > > > @@ -1518,6 +1575,10 @@ static inline int virtqueue_add_packed(struct virtqueue *_vq, > > > > > > > > > vq->packed.desc_state[id].last = prev; > > > > > > > > > vq->packed.desc_state[id].premapped = premapped; > > > > > > > > > > > > > > > > > > + /* Store in buffer length if necessary */ > > > > > > > > > + if (vq->packed.buflen) > > > > > > > > > + vq->packed.buflen[id] = buflen; > > > > > > > > > + > > > > > > > > > /* > > > > > > > > > * A driver MUST NOT make the first descriptor in the list > > > > > > > > > * available before all subsequent descriptors comprising > > > > > > > > > @@ -1718,6 +1779,11 @@ static void *virtqueue_get_buf_ctx_packed(struct virtqueue *_vq, > > > > > > > > > BAD_RING(vq, "id %u is not a head!\n", id); > > > > > > > > > return NULL; > > > > > > > > > } > > > > > > > > > + if (vq->packed.buflen && unlikely(*len > vq->packed.buflen[id])) { > > > > > > > > > + BAD_RING(vq, "used len %d is larger than max in buffer len %u\n", > > > > > > > > > + *len, vq->packed.buflen[id]); > > > > > > > > > + return NULL; > > > > > > > > > + } > > > > > > > > > > > > > > > > > > /* detach_buf_packed clears data, so grab it now. */ > > > > > > > > > ret = vq->packed.desc_state[id].data; > > > > > > > > > @@ -1937,6 +2003,7 @@ static void vring_free_packed(struct vring_virtqueue_packed *vring_packed, > > > > > > > > > vring_packed->device_event_dma_addr, > > > > > > > > > dma_dev); > > > > > > > > > > > > > > > > > > + kfree(vring_packed->buflen); > > > > > > > > > kfree(vring_packed->desc_state); > > > > > > > > > kfree(vring_packed->desc_extra); > > > > > > > > > } > > > > > > > > > @@ -1988,6 +2055,14 @@ static int vring_alloc_queue_packed(struct vring_virtqueue_packed *vring_packed, > > > > > > > > > > > > > > > > > > vring_packed->vring.num = num; > > > > > > > > > > > > > > > > > > + if (vring_needs_used_validation(vdev)) { > > > > > > > > > + vring_packed->buflen = > > > > > > > > > + kmalloc_array(num, sizeof(*vring_packed->buflen), > > > > > > > > > + GFP_KERNEL); > > > > > > > > > + if (!vring_packed->buflen) > > > > > > > > > + goto err; > > > > > > > > > + } > > > > > > > > > + > > > > > > > > > return 0; > > > > > > > > > > > > > > > > > > err: > > > > > > > > > -- > > > > > > > > > 2.25.1 > > > > > > > > > > > > > > > > > > > >