From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qv1-f47.google.com (mail-qv1-f47.google.com [209.85.219.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1EF77369D63 for ; Sun, 12 Jul 2026 04:09:24 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.219.47 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783829366; cv=none; b=UNABT8SSnFt+8QQa+2PRrRigt75liby/78txYnNjQz6uTk5wkYqVjnrVKOU9g4KH6gyr+xWtoUWt9kFtOT9y5aFee2ompXjZysKkzqIUgT8bE4q9KNQeIEJe9XsV0yrhDjaTsE6IoPaWSuU27XA9rNHTc9d2y1SOiibU90h0gxI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783829366; c=relaxed/simple; bh=Is1uTZcsjWqt1oeV/xKwtQSlcsYfiCUlqr6Nb3oqikA=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=WRLpGws3pfhb5fjtByDyDuzYqsEGqec3yuo5HQrdB3RIKV5hF40jTnioo4ZbfLlSSK4kRR3CqEas94So46f+Wk96CWI44u54WDvetjW49HskmfCF/JXITTFI+r/SNd/3JgRDAxqKSpvZI++cVt5QxZ0gEau00MI3jSHBH1YvTL0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=B9KOJYUZ; arc=none smtp.client-ip=209.85.219.47 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="B9KOJYUZ" Received: by mail-qv1-f47.google.com with SMTP id 6a1803df08f44-902e4af2d9dso12550576d6.0 for ; Sat, 11 Jul 2026 21:09:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1783829364; x=1784434164; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=zL5hMPwcvjap6kXmHdRAKsiza+E7uqt1h5fl6yej2OI=; b=B9KOJYUZK7Dg5H1VxN3mHgMFNIAKvPdh9B/WMh12KopedyNZ8Gcz9j6/QYd87tXZPS XVcBjIFdiqIJfyMiY12A9VsW+0dnxKv7Dl9oCyu+g/84BjOF0VKe9lrBYc+lOkXJGfKZ vSU9BeVBYAY8oAwdZclAfoDFWfezA1iEhwbMsTm0G/JyEZbGbdDma/ooC9WalehBbvaN SVoP1GaxjChCEG2tL+L6gxSV/GpZi6FfOjNuGCWvtBOfvYI/lF4nMv2Am/cgLe4q614b XWmx3Pj644djUQuQ4ZAx2keJ8yH6wO/kp0zUBHN8PoQiy+RjkOd2NNr3/YZlkww2ipKH UuAg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783829364; x=1784434164; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=zL5hMPwcvjap6kXmHdRAKsiza+E7uqt1h5fl6yej2OI=; b=jlzjBYBT2OPVq7HEbhpurb24tvON1chI1IBeOj9gSVf39FfjC/9fFt6xVnTyt99Z+M PBLgcesR6WrCm/kB9CWJzVzVLAiuY3U8XlVSe/mqN/tCNVAg2Y43ZXIaJg/tLcN5pAyX jM9Kx/DWdWqcKJYfmkBv3kCUIkLyRNTfXWRjvgJGbshipba4nuinUiYbIaEN57UJloG+ z8vpLemmX7NX2uvk9oYBjMDoDFtT9qCmpDGxEu78N6Ry57mOXbojNhNsiYlie8vJE2JD BBVILj6a9FEr5MyfI0SERa3voz/gvq6Yo0HOond3hZjC8kXbU62DPNGMAJ2uYrBta/fY gyVA== X-Gm-Message-State: AOJu0YzeKT83B3QZ67lli0NwYqjnI5JM8a+OGWOUxj00aSULGS6WpLLe yvzSOqnDUtLq2WIE61LlKqlmOBAf1OLPuAmkFmXGcHUkzSanWKjBOocY57Vzi3a5 X-Gm-Gg: AfdE7cnFB5gDnyNNCYvMSONTfdoV4Y/de6jKG67TUDyI7S+PSTKcT2wKlj46M/k1vjK Fov2G+oWOsHULufaiTTwVgPtWh9uD04r0ctQpp6pC1kQ8fajP/UMv0LOYVN+zZ6WjRVLxnsO+d4 V/pXoyUXAMXm+EHGtN7ERbXQhdr9BiZomRxaaABz3xYVkdtgGeWlml9Jem7DErLFS5hUc1VsGBE QIwK8fu0n5ciNwX0W6el/8Yj8957OirETik3y/Bah8/mGwp5wdhFeoJqSuC6IZktYBxOih8iser 4i/KVtt+t/K7c2gpRos+0jC/z2vnQ9xPlS4hLf4z7BnQRoXvY5v3+flQ7zxAFX1WqcCwPiD2QZe VAfPnumCbLPNXa7IKrwJbuD3IjMPbKoayKrftudfTxoHpMOVm3edoj9dwmMDzs63/zoo5Dww28B beHZAd1pjqAypN6ZeMDNGN8XeO/bxZ0j70W6+GhtLtFVrk2tezxpuvfaYFJiMy3BlrxhIOlmzgL ocoVuEtUpnG7bhwAOXlI3VXjSEfS6OOXcE2Si+UrNw= X-Received: by 2002:a05:620a:4482:b0:92e:d653:df0 with SMTP id af79cd13be357-92ee4b63693mr971094785a.5.1783829364008; Sat, 11 Jul 2026 21:09:24 -0700 (PDT) Received: from ip-172-31-15-253.ec2.internal (ec2-44-200-214-82.compute-1.amazonaws.com. [44.200.214.82]) by smtp.gmail.com with ESMTPSA id af79cd13be357-92ee5cf9d9bsm687147085a.28.2026.07.11.21.09.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 11 Jul 2026 21:09:23 -0700 (PDT) From: Deep Shah To: netdev@vger.kernel.org, Richard Cochran , "David S . Miller" , Jakub Kicinski , Paolo Abeni , Eric Dumazet , Andrew Lunn Cc: linux-kernel@vger.kernel.org, Shuah Khan , linux-kselftest@vger.kernel.org, Deep Shah Subject: [PATCH net 0/2] ptp: fix scaled_ppm_to_ppb() overflow bypassing the max_adj check Date: Sun, 12 Jul 2026 04:09:20 +0000 Message-ID: <20260712040922.6403-1-deepshah146@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: netdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit ptp_clock_adjtime() validates an ADJ_FREQUENCY request by converting tx->freq to ppb and comparing it against ops->max_adj. On 64-bit systems that conversion can overflow s64 and wrap the result back into range, so a crafted tx->freq bypasses the check and reaches ->adjfine() unclamped. Patch 1 rejects the overflow in ptp_clock_adjtime(). Patch 2 adds a regression test that crafts struct timex.freq directly (testptp's int-ppb path cannot express the value) and confirms it is rejected with -ERANGE. Deep Shah (2): ptp: reject frequency adjustments that overflow scaled_ppm_to_ppb() selftests: ptp: add a regression test for the frequency adjustment overflow drivers/ptp/ptp_clock.c | 14 +++- tools/testing/selftests/ptp/Makefile | 2 +- .../testing/selftests/ptp/ptp_freq_overflow.c | 74 +++++++++++++++++++ 3 files changed, 88 insertions(+), 2 deletions(-) create mode 100644 tools/testing/selftests/ptp/ptp_freq_overflow.c base-commit: 3f1f755366687d051174739fb99f7d560202f60b -- 2.43.0