From: Jon Derrick <jonathan.derrick@intel.com>
To: <iommu@lists.linux-foundation.org>
Cc: <linux-pci@vger.kernel.org>, Joerg Roedel <joro@8bytes.org>,
Lu Baolu <baolu.lu@linux.intel.com>,
Jacob Pan <jacob.jun.pan@linux.intel.com>,
Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>,
Ashok Raj <ashok.raj@intel.com>,
Jon Derrick <jonathan.derrick@intel.com>
Subject: [PATCH v1 0/3] iommu/vt-d: real DMA sub-device info allocation
Date: Wed, 27 May 2020 10:56:14 -0600 [thread overview]
Message-ID: <20200527165617.297470-1-jonathan.derrick@intel.com> (raw)
This set adds the support for real DMA sub-devices to have device_domain_info,
leading to the correct domain type being used.
This applies on Joerg's origin/next. This also applies against v5.6.12
and v5.7-rc7 with some API modifications, making it a stable candidate
that fixes the issue reported in [1].
For v5.6.12 and v5.7-rc7, identity_mapping() would return 0 for real DMA
sub-devices due to not having valid device_domain_info, leading to
__intel_map_single() paths. This is a problem if the real DMA device
started in IDENTITY, leading to a NULL Pointer Dereference:
__intel_map_single()
domain = find_domain(dev);
dev = &pci_real_dma_dev(to_pci_dev(dev))->dev;
info = dev->archdata.iommu;
return info->domain;
iommu = domain_get_iommu(domain)
if (WARN_ON(domain->domain.type != IOMMU_DOMAIN_DMA))
return NULL;
cap_zlr(iommu->cap) <-- NULL Pointer Deref
This issue was also fixed by 6fc7020cf298 ("iommu/vt-d: Apply per-device
dma_ops") due to removing identity_mapping() paths.
[1] https://bugzilla.kernel.org/show_bug.cgi?id=207575
Jon Derrick (3):
iommu/vt-d: Only clear real DMA device's context entries
iommu/vt-d: Allocate domain info for real DMA sub-devices
iommu/vt-d: Remove real DMA lookup in find_domain
drivers/iommu/intel-iommu.c | 31 +++++++++++++++++++++++--------
include/linux/intel-iommu.h | 1 +
2 files changed, 24 insertions(+), 8 deletions(-)
--
1.8.3.1
next reply other threads:[~2020-05-27 16:56 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-27 16:56 Jon Derrick [this message]
2020-05-27 16:56 ` [PATCH v1 1/3] iommu/vt-d: Only clear real DMA device's context entries Jon Derrick
2020-05-28 6:59 ` Lu Baolu
2020-05-27 16:56 ` [PATCH v1 2/3] iommu/vt-d: Allocate domain info for real DMA sub-devices Jon Derrick
2020-05-28 7:01 ` Lu Baolu
2020-05-28 7:14 ` Lu Baolu
2020-05-27 16:56 ` [PATCH v1 3/3] iommu/vt-d: Remove real DMA lookup in find_domain Jon Derrick
2020-05-28 7:02 ` Lu Baolu
2020-05-29 13:12 ` [PATCH v1 0/3] iommu/vt-d: real DMA sub-device info allocation Joerg Roedel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200527165617.297470-1-jonathan.derrick@intel.com \
--to=jonathan.derrick@intel.com \
--cc=ashok.raj@intel.com \
--cc=baolu.lu@linux.intel.com \
--cc=iommu@lists.linux-foundation.org \
--cc=jacob.jun.pan@linux.intel.com \
--cc=joro@8bytes.org \
--cc=linux-pci@vger.kernel.org \
--cc=sai.praneeth.prakhya@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).