From: David Rientjes via iommu <iommu@lists.linux-foundation.org>
To: Christoph Hellwig <hch@lst.de>
Cc: iommu@lists.linux-foundation.org, Robin Murphy <robin.murphy@arm.com>
Subject: Re: [PATCH 1/4] dma-direct: factor out dma_set_{de,en}crypted helpers
Date: Tue, 19 Oct 2021 12:54:54 -0700 (PDT) [thread overview]
Message-ID: <b63b1097-9110-5474-9754-a12be7dc1f4f@google.com> (raw)
In-Reply-To: <20211019122916.2468032-2-hch@lst.de>
On Tue, 19 Oct 2021, Christoph Hellwig wrote:
> Factor out helpers the make dealing with memory encryption a little less
> cumbersome.
>
> Signed-off-by: Christoph Hellwig <hch@lst.de>
> ---
> kernel/dma/direct.c | 55 +++++++++++++++++++++------------------------
> 1 file changed, 25 insertions(+), 30 deletions(-)
>
> diff --git a/kernel/dma/direct.c b/kernel/dma/direct.c
> index 4c6c5e0635e34..96f02248e7fa2 100644
> --- a/kernel/dma/direct.c
> +++ b/kernel/dma/direct.c
> @@ -75,6 +75,20 @@ static bool dma_coherent_ok(struct device *dev, phys_addr_t phys, size_t size)
> min_not_zero(dev->coherent_dma_mask, dev->bus_dma_limit);
> }
>
> +static int dma_set_decrypted(struct device *dev, void *vaddr, size_t size)
> +{
> + if (!force_dma_unencrypted(dev))
> + return 0;
> + return set_memory_decrypted((unsigned long)vaddr, 1 << get_order(size));
> +}
> +
> +static int dma_set_encrypted(struct device *dev, void *vaddr, size_t size)
> +{
> + if (!force_dma_unencrypted(dev))
> + return 0;
> + return set_memory_encrypted((unsigned long)vaddr, 1 << get_order(size));
> +}
> +
> static void __dma_direct_free_pages(struct device *dev, struct page *page,
> size_t size)
> {
> @@ -216,12 +230,7 @@ void *dma_direct_alloc(struct device *dev, size_t size,
> __builtin_return_address(0));
> if (!ret)
> goto out_free_pages;
> - if (force_dma_unencrypted(dev)) {
> - err = set_memory_decrypted((unsigned long)ret,
> - 1 << get_order(size));
> - if (err)
> - goto out_free_pages;
> - }
> + err = dma_set_decrypted(dev, ret, size);
Should be
if (dma_set_decrypted(dev, ret, size))
goto out_free_pages;
? Otherwise we ignore the value?
> memset(ret, 0, size);
> goto done;
> }
> @@ -238,13 +247,9 @@ void *dma_direct_alloc(struct device *dev, size_t size,
> }
>
> ret = page_address(page);
> - if (force_dma_unencrypted(dev)) {
> - err = set_memory_decrypted((unsigned long)ret,
> - 1 << get_order(size));
> - if (err)
> - goto out_free_pages;
> - }
> -
> + err = dma_set_decrypted(dev, ret, size);
> + if (err)
> + goto out_free_pages;
> memset(ret, 0, size);
>
> if (IS_ENABLED(CONFIG_ARCH_HAS_DMA_SET_UNCACHED) &&
> @@ -259,13 +264,9 @@ void *dma_direct_alloc(struct device *dev, size_t size,
> return ret;
>
> out_encrypt_pages:
> - if (force_dma_unencrypted(dev)) {
> - err = set_memory_encrypted((unsigned long)page_address(page),
> - 1 << get_order(size));
> - /* If memory cannot be re-encrypted, it must be leaked */
> - if (err)
> - return NULL;
> - }
> + /* If memory cannot be re-encrypted, it must be leaked */
> + if (dma_set_encrypted(dev, page_address(page), size))
> + return NULL;
> out_free_pages:
> __dma_direct_free_pages(dev, page, size);
> return NULL;
> @@ -304,8 +305,7 @@ void dma_direct_free(struct device *dev, size_t size,
> dma_free_from_pool(dev, cpu_addr, PAGE_ALIGN(size)))
> return;
>
> - if (force_dma_unencrypted(dev))
> - set_memory_encrypted((unsigned long)cpu_addr, 1 << page_order);
> + dma_set_encrypted(dev, cpu_addr, 1 << page_order);
>
> if (IS_ENABLED(CONFIG_DMA_REMAP) && is_vmalloc_addr(cpu_addr))
> vunmap(cpu_addr);
> @@ -341,11 +341,8 @@ struct page *dma_direct_alloc_pages(struct device *dev, size_t size,
> }
>
> ret = page_address(page);
> - if (force_dma_unencrypted(dev)) {
> - if (set_memory_decrypted((unsigned long)ret,
> - 1 << get_order(size)))
> - goto out_free_pages;
> - }
> + if (dma_set_decrypted(dev, ret, size))
> + goto out_free_pages;
> memset(ret, 0, size);
> *dma_handle = phys_to_dma_direct(dev, page_to_phys(page));
> return page;
> @@ -366,9 +363,7 @@ void dma_direct_free_pages(struct device *dev, size_t size,
> dma_free_from_pool(dev, vaddr, size))
> return;
>
> - if (force_dma_unencrypted(dev))
> - set_memory_encrypted((unsigned long)vaddr, 1 << page_order);
> -
> + dma_set_encrypted(dev, vaddr, 1 << page_order);
> __dma_direct_free_pages(dev, page, size);
> }
>
> --
> 2.30.2
>
>
_______________________________________________
iommu mailing list
iommu@lists.linux-foundation.org
https://lists.linuxfoundation.org/mailman/listinfo/iommu
next prev parent reply other threads:[~2021-10-19 19:55 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-19 12:29 dma-direct cleanups Christoph Hellwig
2021-10-19 12:29 ` [PATCH 1/4] dma-direct: factor out dma_set_{de,en}crypted helpers Christoph Hellwig
2021-10-19 19:54 ` David Rientjes via iommu [this message]
2021-10-21 6:59 ` Christoph Hellwig
2021-10-19 12:29 ` [PATCH 2/4] dma-direct: leak memory that can't be re-encrypted Christoph Hellwig
2021-10-19 19:56 ` David Rientjes via iommu
2021-10-21 7:22 ` Christoph Hellwig
2021-10-19 12:29 ` [PATCH 3/4] dma-direct: clean up the remapping checks in dma_direct_alloc Christoph Hellwig
2021-10-19 12:29 ` [PATCH 4/4] dma-direct: factor out a helper for DMA_ATTR_NO_KERNEL_MAPPING allocations Christoph Hellwig
2021-10-19 19:57 ` David Rientjes via iommu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=b63b1097-9110-5474-9754-a12be7dc1f4f@google.com \
--to=iommu@lists.linux-foundation.org \
--cc=hch@lst.de \
--cc=rientjes@google.com \
--cc=robin.murphy@arm.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox