From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id B8580EB64DC for ; Sat, 15 Jul 2023 02:10:15 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229535AbjGOCKO (ORCPT ); Fri, 14 Jul 2023 22:10:14 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:49060 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229515AbjGOCKN (ORCPT ); Fri, 14 Jul 2023 22:10:13 -0400 Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 39A2430D8 for ; Fri, 14 Jul 2023 19:10:12 -0700 (PDT) Received: by mail-pl1-x62a.google.com with SMTP id d9443c01a7336-1b9d80e33fbso16202735ad.0 for ; Fri, 14 Jul 2023 19:10:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1689387011; x=1691979011; h=content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:from:references:to:subject:from:to:cc:subject:date :message-id:reply-to; bh=7f2nBCWzMjA5tfYzz8eoIdowPYha5IYuxpNubLLcmIs=; b=koQryzO2EmYeCMJpgt4nEbCSPQ02ktR7TLecLYd4jI3nFaxQ7kf+1V1T+436x2XBkN F+SR4+588c3TwtY1wqBxyeBfyZ42vvcFrcnR8ocJariPI4ljB6mdGmaqlKVB632N4P5D +ky8T+qvbdQFmRGjUPSrN3FQH9FjvUUUht0A0g7ElLxT+r2Myn1dTeTTL8fNu/ZcDE/V Z3mTP/QUnR76mfAC8+dUdJdoDpaGBHEQ2ASwWJgrsYUug0QwMq4vgxAFIn68Wt5NA9b9 KeM4UPi4//BSfD2+VSzDbQYVXwI7BLKSHjYewB6PTp15E1DL5TPREpq9g1gqGUwdn95W Rbug== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1689387011; x=1691979011; h=content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:from:references:to:subject:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=7f2nBCWzMjA5tfYzz8eoIdowPYha5IYuxpNubLLcmIs=; b=ktw1txvTu42iPEI3gu1r6SxNFhcUjCvkuQv0e3GwZvvSgtXn4C5DRzJV24Ti0UQ8l2 yo3L0+mM1kibY5Ve7zSe0I9r8tfZijcQfgeSk9xvQ84NsOszHbkEvk0eOE4Pwl/qqi+f +d9QfFKLJH8Xo5OpvzdEYgfaxxPDzluFTUokuPXBqyoHvb5//5g2vYc0KIxR3G86AZJQ cthZm6Ey97hG+BNvvaJwB0+FXfeLiBZchxFhLC/BeUrY31885HX2LE988BhAa2xAFOcu cimWphxFDkMgQJzYPknRc5Ksglog70GwB2CSfHdhwyNTXLefrRC/ZIjZNM1GEy84f0SF IjnA== X-Gm-Message-State: ABy/qLbFfBEyGMGVfo6WwrNc/3X9LhXcfriEnnhb5jS8/H74Hc6SixlQ d2Gj4/+6LMXdlda/VY8eN4Oe0tLrqxU= X-Google-Smtp-Source: APBJJlGXTPz3O+PKiJDexkptwte/QV2F0e8WjzSFD0hjOBNSlZ+9DYjuEKzZ83F5D5g13qB3odFCPQ== X-Received: by 2002:a17:902:db08:b0:1b9:d3a2:f596 with SMTP id m8-20020a170902db0800b001b9d3a2f596mr5827363plx.52.1689387011190; Fri, 14 Jul 2023 19:10:11 -0700 (PDT) Received: from [10.1.1.24] (222-152-184-54-fibre.sparkbb.co.nz. [222.152.184.54]) by smtp.gmail.com with ESMTPSA id io12-20020a17090312cc00b001b9dfa24523sm8345271plb.213.2023.07.14.19.10.06 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 14 Jul 2023 19:10:10 -0700 (PDT) Subject: Re: FAILED: patch "[PATCH] block: add overflow checks for Amiga partition support" failed to apply to 5.10-stable tree To: gregkh@linuxfoundation.org, Martin@lichtvoll.de, axboe@kernel.dk, geert@linux-m68k.org, hch@infradead.org, jdow@earthlink.net, stable@vger.kernel.org References: <2023071116-umbrella-fog-a65f@gregkh> <357b640e-5d24-7779-f4a6-d704bd623934@gmail.com> From: Michael Schmitz Message-ID: <7cdf2e11-1b29-513f-f296-f41315c7d3bb@gmail.com> Date: Sat, 15 Jul 2023 14:10:03 +1200 User-Agent: Mozilla/5.0 (X11; Linux ppc; rv:45.0) Gecko/20100101 Icedove/45.4.0 MIME-Version: 1.0 In-Reply-To: <357b640e-5d24-7779-f4a6-d704bd623934@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk List-ID: X-Mailing-List: stable@vger.kernel.org Hi Greg, Am 12.07.2023 um 08:45 schrieb Michael Schmitz: > Hi Greg, > > this patch was part of a series of three patches > (fc3d092c6bb48d5865fec15ed5b333c12f36288c, > 95a55437dc49fb3342c82e61f5472a71c63d9ed0, > b6f3f28f604ba3de4724ad82bea6adb1300c0b5f). The first in that series must > also be cherry-picked in order for the third one to apply cleanly. > > You appear to have applied fc3d092c6bb48d5865fec15ed5b333c12f36288c to > 5.4 and 5.10 now, so I'd expect re-applying > b6f3f28f604ba3de4724ad82bea6adb1300c0b5f would work OK Apologies for insinuating you'd forgotten to apply the prerequisite patches. I evidently messed up the stable prerequisite tag for that patch. I've corrected the merge conflicts (along with a few compile errors) and tested on ARAnyM with the same RDB disk image I'd used to test the original series. Now one question remains: > > Please note that after these have all been applied, we still need > 7eb1e47696aa231b1a567846bbe3a1e1befe1854 ("block/partition: fix > signedness issue for Amiga partitions") which is a bugfix for > b6f3f28f604ba3de4724ad82bea6adb1300c0b5f. The bugfix to b6f3f28f604ba3de4724ad82bea6adb1300c0b5f is still needed but 7eb1e47696aa231b1a567846bbe3a1e1befe1854 wasn't available in 5.4 nor 5.10. Would you prefer to have this bugfix folded into the resubmitted patches for 5.4 and 5.10, or pick it up from linux-block separate? Cheers, Michael > Thanks! > > Cheers, > > Michael > > > On 12/07/23 08:30, gregkh@linuxfoundation.org wrote: >> The patch below does not apply to the 5.10-stable tree. >> If someone wants it applied there, or to any other stable or longterm >> tree, then please email the backport, including the original git commit >> id to . >> >> To reproduce the conflict and resubmit, you may use the following >> commands: >> >> git fetch >> https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ >> linux-5.10.y >> git checkout FETCH_HEAD >> git cherry-pick -x b6f3f28f604ba3de4724ad82bea6adb1300c0b5f >> # >> git commit -s >> git send-email --to '' --in-reply-to >> '2023071116-umbrella-fog-a65f@gregkh' --subject-prefix 'PATCH 5.10.y' >> HEAD^.. >> >> Possible dependencies: >> >> >> >> thanks, >> >> greg k-h >> >> ------------------ original commit in Linus's tree ------------------ >> >> From b6f3f28f604ba3de4724ad82bea6adb1300c0b5f Mon Sep 17 00:00:00 2001 >> From: Michael Schmitz >> Date: Wed, 21 Jun 2023 08:17:25 +1200 >> Subject: [PATCH] block: add overflow checks for Amiga partition support >> >> The Amiga partition parser module uses signed int for partition sector >> address and count, which will overflow for disks larger than 1 TB. >> >> Use u64 as type for sector address and size to allow using disks up to >> 2 TB without LBD support, and disks larger than 2 TB with LBD. The RBD >> format allows to specify disk sizes up to 2^128 bytes (though native >> OS limitations reduce this somewhat, to max 2^68 bytes), so check for >> u64 overflow carefully to protect against overflowing sector_t. >> >> Bail out if sector addresses overflow 32 bits on kernels without LBD >> support. >> >> This bug was reported originally in 2012, and the fix was created by >> the RDB author, Joanne Dow . A patch had been >> discussed and reviewed on linux-m68k at that time but never officially >> submitted (now resubmitted as patch 1 in this series). >> This patch adds additional error checking and warning messages. >> >> Reported-by: Martin Steigerwald >> Closes: https://bugzilla.kernel.org/show_bug.cgi?id=43511 >> Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") >> Message-ID: <201206192146.09327.Martin@lichtvoll.de> >> Cc: # 5.2 >> Signed-off-by: Michael Schmitz >> Reviewed-by: Geert Uytterhoeven >> Reviewed-by: Christoph Hellwig >> Link: >> https://lore.kernel.org/r/20230620201725.7020-4-schmitzmic@gmail.com >> Signed-off-by: Jens Axboe >> >> diff --git a/block/partitions/amiga.c b/block/partitions/amiga.c >> index 85c5c79aae48..ed222b9c901b 100644 >> --- a/block/partitions/amiga.c >> +++ b/block/partitions/amiga.c >> @@ -11,10 +11,18 @@ >> #define pr_fmt(fmt) fmt >> #include >> +#include >> +#include >> #include >> #include "check.h" >> +/* magic offsets in partition DosEnvVec */ >> +#define NR_HD 3 >> +#define NR_SECT 5 >> +#define LO_CYL 9 >> +#define HI_CYL 10 >> + >> static __inline__ u32 >> checksum_block(__be32 *m, int size) >> { >> @@ -31,9 +39,12 @@ int amiga_partition(struct parsed_partitions *state) >> unsigned char *data; >> struct RigidDiskBlock *rdb; >> struct PartitionBlock *pb; >> - sector_t start_sect, nr_sects; >> - int blk, part, res = 0; >> - int blksize = 1; /* Multiplier for disk block size */ >> + u64 start_sect, nr_sects; >> + sector_t blk, end_sect; >> + u32 cylblk; /* rdb_CylBlocks = nr_heads*sect_per_track */ >> + u32 nr_hd, nr_sect, lo_cyl, hi_cyl; >> + int part, res = 0; >> + unsigned int blksize = 1; /* Multiplier for disk block size */ >> int slot = 1; >> for (blk = 0; ; blk++, put_dev_sector(sect)) { >> @@ -41,7 +52,7 @@ int amiga_partition(struct parsed_partitions *state) >> goto rdb_done; >> data = read_part_sector(state, blk, §); >> if (!data) { >> - pr_err("Dev %s: unable to read RDB block %d\n", >> + pr_err("Dev %s: unable to read RDB block %llu\n", >> state->disk->disk_name, blk); >> res = -1; >> goto rdb_done; >> @@ -58,12 +69,12 @@ int amiga_partition(struct parsed_partitions *state) >> *(__be32 *)(data+0xdc) = 0; >> if (checksum_block((__be32 *)data, >> be32_to_cpu(rdb->rdb_SummedLongs) & 0x7F)==0) { >> - pr_err("Trashed word at 0xd0 in block %d ignored in >> checksum calculation\n", >> + pr_err("Trashed word at 0xd0 in block %llu ignored in >> checksum calculation\n", >> blk); >> break; >> } >> - pr_err("Dev %s: RDB in block %d has bad checksum\n", >> + pr_err("Dev %s: RDB in block %llu has bad checksum\n", >> state->disk->disk_name, blk); >> } >> @@ -80,10 +91,15 @@ int amiga_partition(struct parsed_partitions >> *state) >> blk = be32_to_cpu(rdb->rdb_PartitionList); >> put_dev_sector(sect); >> for (part = 1; blk>0 && part<=16; part++, put_dev_sector(sect)) { >> - blk *= blksize; /* Read in terms partition table >> understands */ >> + /* Read in terms partition table understands */ >> + if (check_mul_overflow(blk, (sector_t) blksize, &blk)) { >> + pr_err("Dev %s: overflow calculating partition block >> %llu! Skipping partitions %u and beyond\n", >> + state->disk->disk_name, blk, part); >> + break; >> + } >> data = read_part_sector(state, blk, §); >> if (!data) { >> - pr_err("Dev %s: unable to read partition block %d\n", >> + pr_err("Dev %s: unable to read partition block %llu\n", >> state->disk->disk_name, blk); >> res = -1; >> goto rdb_done; >> @@ -95,19 +111,70 @@ int amiga_partition(struct parsed_partitions *state) >> if (checksum_block((__be32 *)pb, >> be32_to_cpu(pb->pb_SummedLongs) & 0x7F) != 0 ) >> continue; >> - /* Tell Kernel about it */ >> + /* RDB gives us more than enough rope to hang ourselves with, >> + * many times over (2^128 bytes if all fields max out). >> + * Some careful checks are in order, so check for potential >> + * overflows. >> + * We are multiplying four 32 bit numbers to one sector_t! >> + */ >> + >> + nr_hd = be32_to_cpu(pb->pb_Environment[NR_HD]); >> + nr_sect = be32_to_cpu(pb->pb_Environment[NR_SECT]); >> + >> + /* CylBlocks is total number of blocks per cylinder */ >> + if (check_mul_overflow(nr_hd, nr_sect, &cylblk)) { >> + pr_err("Dev %s: heads*sects %u overflows u32, skipping >> partition!\n", >> + state->disk->disk_name, cylblk); >> + continue; >> + } >> + >> + /* check for consistency with RDB defined CylBlocks */ >> + if (cylblk > be32_to_cpu(rdb->rdb_CylBlocks)) { >> + pr_warn("Dev %s: cylblk %u > rdb_CylBlocks %u!\n", >> + state->disk->disk_name, cylblk, >> + be32_to_cpu(rdb->rdb_CylBlocks)); >> + } >> + >> + /* RDB allows for variable logical block size - >> + * normalize to 512 byte blocks and check result. >> + */ >> + >> + if (check_mul_overflow(cylblk, blksize, &cylblk)) { >> + pr_err("Dev %s: partition %u bytes per cyl. overflows >> u32, skipping partition!\n", >> + state->disk->disk_name, part); >> + continue; >> + } >> + >> + /* Calculate partition start and end. Limit of 32 bit on cylblk >> + * guarantees no overflow occurs if LBD support is enabled. >> + */ >> + >> + lo_cyl = be32_to_cpu(pb->pb_Environment[LO_CYL]); >> + start_sect = ((u64) lo_cyl * cylblk); >> + >> + hi_cyl = be32_to_cpu(pb->pb_Environment[HI_CYL]); >> + nr_sects = (((u64) hi_cyl - lo_cyl + 1) * cylblk); >> - nr_sects = ((sector_t)be32_to_cpu(pb->pb_Environment[10]) + >> 1 - >> - be32_to_cpu(pb->pb_Environment[9])) * >> - be32_to_cpu(pb->pb_Environment[3]) * >> - be32_to_cpu(pb->pb_Environment[5]) * >> - blksize; >> if (!nr_sects) >> continue; >> - start_sect = (sector_t)be32_to_cpu(pb->pb_Environment[9]) * >> - be32_to_cpu(pb->pb_Environment[3]) * >> - be32_to_cpu(pb->pb_Environment[5]) * >> - blksize; >> + >> + /* Warn user if partition end overflows u32 (AmigaDOS limit) */ >> + >> + if ((start_sect + nr_sects) > UINT_MAX) { >> + pr_warn("Dev %s: partition %u (%llu-%llu) needs 64 bit >> device support!\n", >> + state->disk->disk_name, part, >> + start_sect, start_sect + nr_sects); >> + } >> + >> + if (check_add_overflow(start_sect, nr_sects, &end_sect)) { >> + pr_err("Dev %s: partition %u (%llu-%llu) needs LBD device >> support, skipping partition!\n", >> + state->disk->disk_name, part, >> + start_sect, end_sect); >> + continue; >> + } >> + >> + /* Tell Kernel about it */ >> + >> put_partition(state,slot++,start_sect,nr_sects); >> { >> /* Be even more informative to aid mounting */ >>