public inbox for linux-arm-kernel@lists.infradead.org 
 help / color / mirror / Atom feed
From: Paolo Bonzini <pbonzini@redhat•com>
To: Greg Kroah-Hartman <gregkh@linuxfoundation•org>
Cc: mark.rutland@arm•com, x86@kernel•org, wanpengli@tencent•com,
	kvm@vger•kernel.org, narmstrong@baylibre•com,
	catalin.marinas@arm•com, will.deacon@arm•com, hpa@zytor•com,
	khilman@baylibre•com, joro@8bytes•org, rkrcmar@redhat•com,
	mingo@redhat•com, Dmitry Vyukov <dvyukov@google•com>,
	syzbot <syzbot+46f1dd7dbbe2bfb98b10@syzkaller•appspotmail.com>,
	devicetree@vger•kernel.org, syzkaller-bugs@googlegroups•com,
	robh+dt@kernel•org, bp@alien8•de,
	linux-amlogic@lists•infradead.org, tglx@linutronix•de,
	linux-arm-kernel@lists•infradead.org, jmattson@google•com,
	USB list <linux-usb@vger•kernel.org>,
	linux-kernel@vger•kernel.org, sean.j.christopherson@intel•com,
	carlo@caione•org, Vitaly Kuznetsov <vkuznets@redhat•com>
Subject: Re: KASAN: slab-out-of-bounds Read in handle_vmptrld
Date: Fri, 13 Sep 2019 17:01:22 +0200	[thread overview]
Message-ID: <6a0ec3a2-2a52-f67a-6140-e0a60874538a@redhat.com> (raw)
In-Reply-To: <20190913130226.GB403359@kroah.com>

On 13/09/19 15:02, Greg Kroah-Hartman wrote:
> Look at linux-next, we "should" have fixed up hcd_buffer_alloc() now to
> not need this type of thing.  If we got it wrong, please let us know and
> then yes, a fix like this would be most appreciated :)

I still see

	/* some USB hosts just use PIO */
	if (!hcd_uses_dma(hcd)) {
		*dma = ~(dma_addr_t) 0;
		return kmalloc(size, mem_flags);
	}

in linux-next's hcd_buffer_alloc and also in usb.git's usb-next branch.
 I also see the same

	if (remap_pfn_range(vma, vma->vm_start,
			virt_to_phys(usbm->mem) >> PAGE_SHIFT,
			size, vma->vm_page_prot) < 0) {
		...
	}

in usbdev_mmap.  Of course it's possible that I'm looking at the wrong
branch, or just being dense.

Paolo

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists•infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

  reply	other threads:[~2019-09-13 15:03 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-09-11 20:38 KASAN: slab-out-of-bounds Read in handle_vmptrld syzbot
2019-09-12 12:25 ` Will Deacon
2019-09-12 13:54 ` Vitaly Kuznetsov
2019-09-12 16:49   ` Paolo Bonzini
2019-09-13  4:46     ` Greg Kroah-Hartman
2019-09-13  7:34       ` Paolo Bonzini
2019-09-13 13:02         ` Greg Kroah-Hartman
2019-09-13 15:01           ` Paolo Bonzini [this message]
2019-09-13 15:32             ` Robin Murphy
2019-09-13 21:39               ` Paolo Bonzini
2019-09-13 15:36             ` Alan Stern
2019-09-13 16:14               ` Paolo Bonzini

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=6a0ec3a2-2a52-f67a-6140-e0a60874538a@redhat.com \
    --to=pbonzini@redhat$(echo .)com \
    --cc=bp@alien8$(echo .)de \
    --cc=carlo@caione$(echo .)org \
    --cc=catalin.marinas@arm$(echo .)com \
    --cc=devicetree@vger$(echo .)kernel.org \
    --cc=dvyukov@google$(echo .)com \
    --cc=gregkh@linuxfoundation$(echo .)org \
    --cc=hpa@zytor$(echo .)com \
    --cc=jmattson@google$(echo .)com \
    --cc=joro@8bytes$(echo .)org \
    --cc=khilman@baylibre$(echo .)com \
    --cc=kvm@vger$(echo .)kernel.org \
    --cc=linux-amlogic@lists$(echo .)infradead.org \
    --cc=linux-arm-kernel@lists$(echo .)infradead.org \
    --cc=linux-kernel@vger$(echo .)kernel.org \
    --cc=linux-usb@vger$(echo .)kernel.org \
    --cc=mark.rutland@arm$(echo .)com \
    --cc=mingo@redhat$(echo .)com \
    --cc=narmstrong@baylibre$(echo .)com \
    --cc=rkrcmar@redhat$(echo .)com \
    --cc=robh+dt@kernel$(echo .)org \
    --cc=sean.j.christopherson@intel$(echo .)com \
    --cc=syzbot+46f1dd7dbbe2bfb98b10@syzkaller$(echo .)appspotmail.com \
    --cc=syzkaller-bugs@googlegroups$(echo .)com \
    --cc=tglx@linutronix$(echo .)de \
    --cc=vkuznets@redhat$(echo .)com \
    --cc=wanpengli@tencent$(echo .)com \
    --cc=will.deacon@arm$(echo .)com \
    --cc=x86@kernel$(echo .)org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox