From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 560AEE63FE3 for ; Sat, 4 Apr 2026 16:56:37 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:In-Reply-To:References:Cc:To:From:Subject:MIME-Version:Date: Message-ID:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=ST2pb+/gQk3IV14UpJzT4A8hj7OcdgJQlHupwD1g5y0=; b=kr3iH+d3uWMElHCIP7yQwnxV42 /eMrqm2hvvfdlF1KeQaky2i9bsJ0pPcc7ubxmSBQVvXgMzMnJNZi/nQsArbQACIVDNcj2jJRpjT/Q 9e0O/Gd66ziFFfPNrP6zlNENHroJi/T/8ZxSYDRbd9lAWJ9u6qdmZR7arlzSnOocegVXNLH0TmJBw X4ypMbHQboiYlfPwM95Ye5mZycO8lX2SraDIIOyQTaF9w+yMjZQ1uHBBPaWLVnWNAManW0oCkYAps pPMrWl8ubS+jtW7FDVKdjziMVOxGTwQ3Bi3b3eusKshKq3bVPCC4ZA2DSoJDb+1GrjvqbpKk9Pp4D Q69SWWWw==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux)) id 1w94IP-00000003c1q-1vP4; Sat, 04 Apr 2026 16:56:29 +0000 Received: from sea.source.kernel.org ([2600:3c0a:e001:78e:0:1991:8:25]) by bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux)) id 1w94IM-00000003c1T-28An for linux-arm-kernel@lists.infradead.org; Sat, 04 Apr 2026 16:56:27 +0000 Received: from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58]) by sea.source.kernel.org (Postfix) with ESMTP id C91694059C; Sat, 4 Apr 2026 16:56:24 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id A189EC19421; Sat, 4 Apr 2026 16:56:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1775321784; bh=z0EKK9uCRclvxyjrhd1+SN0RRq/OFfBzrXy9eOqqb1Y=; h=Date:Subject:From:To:Cc:References:In-Reply-To:From; b=Pvkgz2VYtss1MeKDd1hCnXOqFhZSJT7sCBgib4Ld40MuoHbsbTzaQtqEQlHI315/z sSsTrUhsdTJPdFsI6MsazCxIagVra3Yz7Nj6ieza8kV78SqaqqkR1jw4ERelqbogu8 P2C5HKTLPE156wtoOmaEhBjNWmWs1/5XjIm7Pn+IztUEvzTxOWgE4ijDSgxwxt7sHW /z+by/VjXh6iXK4C6vfLmsq7Ld8muhOBjOIJmJuiMgdiDbMtkSfkPxjp0+PDXt64DF SAsEhipno3UJ1XHvp0XZyChIymjhWJhckqoZh6Dfi1SExI1b8SJikdcJieSIN27yIj n1QGwKpOYjS/A== Message-ID: Date: Sat, 4 Apr 2026 18:56:08 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 02/12] bus: fsl-mc: use generic driver_override infrastructure From: "Christophe Leroy (CS GROUP)" To: Ioana Ciornei , Danilo Krummrich Cc: Russell King , Greg Kroah-Hartman , "Rafael J. Wysocki" , Nipun Gupta , Nikhil Agarwal , "K. Y. Srinivasan" , Haiyang Zhang , Wei Liu , Dexuan Cui , Long Li , Bjorn Helgaas , Armin Wolf , Bjorn Andersson , Mathieu Poirier , Vineeth Vijayan , Peter Oberparleiter , Heiko Carstens , Vasily Gorbik , Alexander Gordeev , Christian Borntraeger , Sven Schnelle , Harald Freudenberger , Holger Dengler , Mark Brown , "Michael S. Tsirkin" , Jason Wang , Xuan Zhuo , =?UTF-8?Q?Eugenio_P=C4=82=C2=A9rez?= , Alex Williamson , Juergen Gross , Stefano Stabellini , Oleksandr Tyshchenko , linux-kernel@vger.kernel.org, driver-core@lists.linux.dev, linuxppc-dev@lists.ozlabs.org, linux-hyperv@vger.kernel.org, linux-pci@vger.kernel.org, platform-driver-x86@vger.kernel.org, linux-arm-msm@vger.kernel.org, linux-remoteproc@vger.kernel.org, linux-s390@vger.kernel.org, linux-spi@vger.kernel.org, virtualization@lists.linux.dev, kvm@vger.kernel.org, xen-devel@lists.xenproject.org, linux-arm-kernel@lists.infradead.org, Gui-Dong Han References: <20260324005919.2408620-1-dakr@kernel.org> <20260324005919.2408620-3-dakr@kernel.org> <4c5e9bad-82f0-4714-99c2-8ccd79a45043@kernel.org> Content-Language: fr-FR In-Reply-To: <4c5e9bad-82f0-4714-99c2-8ccd79a45043@kernel.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20260404_095626_611543_85342319 X-CRM114-Status: GOOD ( 11.13 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Le 28/03/2026 à 13:10, Christophe Leroy (CS GROUP) a écrit : > > > Le 25/03/2026 à 13:01, Ioana Ciornei a écrit : >> On Tue, Mar 24, 2026 at 01:59:06AM +0100, Danilo Krummrich wrote: >>> When a driver is probed through __driver_attach(), the bus' match() >>> callback is called without the device lock held, thus accessing the >>> driver_override field without a lock, which can cause a UAF. >>> >>> Fix this by using the driver-core driver_override infrastructure taking >>> care of proper locking internally. >>> >>> Note that calling match() from __driver_attach() without the device lock >>> held is intentional. [1] >>> >>> Link: https://eur01.safelinks.protection.outlook.com/? >>> url=https%3A%2F%2Flore.kernel.org%2Fdriver- >>> core%2FDGRGTIRHA62X.3RY09D9SOK77P%40kernel.org%2F&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C4b9262ddecdd4ce29f9808de8a66485e%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639100369055903282%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2BRfjlUkq7oWV%2F0v2S2B%2BEuxCY%2FLRQv6qHiEWiupd6kc%3D&reserved=0 [1] >>> Reported-by: Gui-Dong Han >>> Closes: https://eur01.safelinks.protection.outlook.com/? >>> url=https%3A%2F%2Fbugzilla.kernel.org%2Fshow_bug.cgi%3Fid%3D220789&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7C4b9262ddecdd4ce29f9808de8a66485e%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639100369055936232%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=XL1K1ICiygOZnlvDUbQFe192KnLsBQms0HFNGCuyz%2Fw%3D&reserved=0 >>> Fixes: 1f86a00c1159 ("bus/fsl-mc: add support for 'driver_override' >>> in the mc-bus") >>> Signed-off-by: Danilo Krummrich >> >> Tested-by: Ioana Ciornei >> Signed-off-by: Ioana Ciornei >> > > > Applied, thanks Have to drop it for now, build fails: CALL scripts/checksyscalls.sh CC drivers/bus/fsl-mc/fsl-mc-bus.o drivers/bus/fsl-mc/fsl-mc-bus.c: In function 'fsl_mc_bus_match': drivers/bus/fsl-mc/fsl-mc-bus.c:92:15: error: implicit declaration of function 'device_match_driver_override' [-Werror=implicit-function-declaration] 92 | ret = device_match_driver_override(dev, drv); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/bus/fsl-mc/fsl-mc-bus.c: At top level: drivers/bus/fsl-mc/fsl-mc-bus.c:321:10: error: 'const struct bus_type' has no member named 'driver_override' 321 | .driver_override = true, | ^~~~~~~~~~~~~~~ drivers/bus/fsl-mc/fsl-mc-bus.c:321:28: warning: initialization of 'const char *' from 'int' makes pointer from integer without a cast [-Wint-conversion] 321 | .driver_override = true, | ^~~~ drivers/bus/fsl-mc/fsl-mc-bus.c:321:28: note: (near initialization for 'fsl_mc_bus_type.dev_name') cc1: some warnings being treated as errors make[5]: *** [scripts/Makefile.build:289: drivers/bus/fsl-mc/fsl-mc-bus.o] Error 1 make[4]: *** [scripts/Makefile.build:546: drivers/bus/fsl-mc] Error 2 make[3]: *** [scripts/Makefile.build:546: drivers/bus] Error 2 make[2]: *** [scripts/Makefile.build:546: drivers] Error 2 make[1]: *** [/home/chleroy/linux-powerpc/Makefile:2101: .] Error 2 make: *** [Makefile:248: __sub-make] Error 2 Christophe