From: Ira Weiny <ira.weiny@intel.com>
To: Robert Richter <rrichter@amd.com>,
Vishal Verma <vishal.l.verma@intel.com>,
Ira Weiny <ira.weiny@intel.com>,
Dan Williams <dan.j.williams@intel.com>,
Dave Jiang <dave.jiang@intel.com>
Cc: Alison Schofield <alison.schofield@intel.com>,
Jonathan Cameron <Jonathan.Cameron@huawei.com>,
<linux-cxl@vger.kernel.org>, <linux-kernel@vger.kernel.org>,
Davidlohr Bueso <dave@stgolabs.net>,
"Gregory Price" <gourry@gourry.net>,
Terry Bowman <terry.bowman@amd.com>,
"Robert Richter" <rrichter@amd.com>,
Pankaj Gupta <pankaj.gupta@amd.com>, <nvdimm@lists.linux.dev>
Subject: Re: [PATCH v2] libnvdimm/labels: Fix divide error in nd_label_data_init()
Date: Fri, 21 Mar 2025 08:41:47 -0500 [thread overview]
Message-ID: <67dd6c9b3727d_7836e2947@iweiny-mobl.notmuch> (raw)
In-Reply-To: <20250320112223.608320-1-rrichter@amd.com>
Robert Richter wrote:
> If a faulty CXL memory device returns a broken zero LSA size in its
> memory device information (Identify Memory Device (Opcode 4000h), CXL
> spec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm
> driver:
>
> Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI
> RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm]
>
> Code and flow:
>
> 1) CXL Command 4000h returns LSA size = 0
> 2) config_size is assigned to zero LSA size (CXL pmem driver):
>
> drivers/cxl/pmem.c: .config_size = mds->lsa_size,
>
> 3) max_xfer is set to zero (nvdimm driver):
>
> drivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd->nsarea.max_xfer, config_size);
>
> 4) A subsequent DIV_ROUND_UP() causes a division by zero:
>
> drivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */
> drivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer,
> drivers/nvdimm/label.c- config_size);
>
> Fix this by checking the config size parameter by extending an
> existing check.
>
> Signed-off-by: Robert Richter <rrichter@amd.com>
> Reviewed-by: Pankaj Gupta <pankaj.gupta@amd.com>
> Reviewed-by: Ira Weiny <ira.weiny@intel.com>
Applied to nvdimm/next
Thanks,
Ira
[snip]
prev parent reply other threads:[~2025-03-21 13:41 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-03-20 11:22 [PATCH v2] libnvdimm/labels: Fix divide error in nd_label_data_init() Robert Richter
2025-03-21 0:41 ` Davidlohr Bueso
2025-03-21 13:41 ` Ira Weiny [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=67dd6c9b3727d_7836e2947@iweiny-mobl.notmuch \
--to=ira.weiny@intel.com \
--cc=Jonathan.Cameron@huawei.com \
--cc=alison.schofield@intel.com \
--cc=dan.j.williams@intel.com \
--cc=dave.jiang@intel.com \
--cc=dave@stgolabs.net \
--cc=gourry@gourry.net \
--cc=linux-cxl@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=nvdimm@lists.linux.dev \
--cc=pankaj.gupta@amd.com \
--cc=rrichter@amd.com \
--cc=terry.bowman@amd.com \
--cc=vishal.l.verma@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox