Received: by 2002:ac0:a581:0:0:0:0:0 with SMTP id m1-v6csp414782imm; Tue, 3 Jul 2018 22:38:42 -0700 (PDT) X-Google-Smtp-Source: AAOMgpfJnBREYeZsFLhMG8BeICrvB7mnoecDqTHm/7Xi8de9rHnarLti6kwAJ3JHxctGD6pE9Hlc X-Received: by 2002:a65:61a7:: with SMTP id i7-v6mr603220pgv.219.1530682722200; Tue, 03 Jul 2018 22:38:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1530682722; cv=none; d=google.com; s=arc-20160816; b=MITuJMus2NnMxdZSkDVmamVKewXDniAO5JM4dmxG6DjIsgfvXU/Fe4diNh1Vx6Q1dF /27XhkWE07g3KaSySEHr3itB1tOLyp/wBHGkkSMgxyUKOul20NWPOZ4erkNdfyBVMTtQ GH413wWxJq6JZiuI+mur9hJZFZWGrRAfHRufI03SLTuOou4nPzxImI6dWzT+gGdEhgpY 4ZbqQRR6uXgBBgzCnimTX24VUVZ7y/A1bDvYXymRPYNl2XVKU3CDEdxSdfMDpXTuBnMw /vJxGXrlfxQepuqK+S4mphut9RI4P7GJYkeu/73AF7YrTj29jqMBCixmldmu9Y0qA9N+ ucpw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:in-reply-to:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :arc-authentication-results; bh=eiS+J60vHgtEun+9t7x5Bg0N/Yg4qwXDJlelEnYfS6k=; b=WY7rUxJLkvt3bK+4Y8vtZsqESVnlHREX6czZ08BzC3Z8gSfCHP5yAE4si7q2YP7JKq Vg3YuiXx80YhCmkSWifAXsac1BM25TQ3GzUEXItS8IB663pDRK6yvJjJ++FEYLhBG0cZ xLjJz2LvY8D6itTZdq7qKl/irMTeUBcILK9PhNS/SfS/+1Flvihq0F++sigLs/b9YJs/ OlNipWKSh8cfkluSAbALsGJLFNlY2KVbN+qi5yeAZU2vbxh5XlLn8IGu4HevtH1JPJXn qkMzHJ5iZSOFhXeIjrsh7dI3LuOhenrF9nx2EIHmke4I4nCGcgf4GMMGDpXfwV25WlrL hNAA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id u6-v6si2823374plr.437.2018.07.03.22.38.26; Tue, 03 Jul 2018 22:38:42 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932896AbeGDFhs (ORCPT + 99 others); Wed, 4 Jul 2018 01:37:48 -0400 Received: from mx3-rdu2.redhat.com ([66.187.233.73]:54402 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S932252AbeGDFhq (ORCPT ); Wed, 4 Jul 2018 01:37:46 -0400 Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.rdu2.redhat.com [10.11.54.3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 45871C324; Wed, 4 Jul 2018 05:37:46 +0000 (UTC) Received: from redhat.com (ovpn-120-128.rdu2.redhat.com [10.10.120.128]) by smtp.corp.redhat.com (Postfix) with SMTP id 134B9111C482; Wed, 4 Jul 2018 05:37:42 +0000 (UTC) Date: Wed, 4 Jul 2018 08:37:42 +0300 From: "Michael S. Tsirkin" To: Suzuki K Poulose Cc: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, kvm@vger.kernel.org, kvmarm@lists.cs.columbia.edu, james.morse@arm.com, marc.zyngier@arm.com, cdall@kernel.org, eric.auger@redhat.com, julien.grall@arm.com, will.deacon@arm.com, catalin.marinas@arm.com, punit.agrawal@arm.com, qemu-devel@nongnu.org, Jason Wang , Peter Maydel , Jean-Philippe Brucker Subject: Re: [PATCH v3 01/20] virtio: mmio-v1: Validate queue PFN Message-ID: <20180704083618-mutt-send-email-mst@kernel.org> References: <1530270944-11351-1-git-send-email-suzuki.poulose@arm.com> <1530270944-11351-2-git-send-email-suzuki.poulose@arm.com> <20180629200816-mutt-send-email-mst@kernel.org> <5124334c-b3c8-4c59-b652-d26ea1101807@arm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <5124334c-b3c8-4c59-b652-d26ea1101807@arm.com> X-Scanned-By: MIMEDefang 2.78 on 10.11.54.3 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.1]); Wed, 04 Jul 2018 05:37:46 +0000 (UTC) X-Greylist: inspected by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.1]); Wed, 04 Jul 2018 05:37:46 +0000 (UTC) for IP:'10.11.54.3' DOMAIN:'int-mx03.intmail.prod.int.rdu2.redhat.com' HELO:'smtp.corp.redhat.com' FROM:'mst@redhat.com' RCPT:'' Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Jul 03, 2018 at 09:04:01AM +0100, Suzuki K Poulose wrote: > Hi Michael, > > On 06/29/2018 06:42 PM, Michael S. Tsirkin wrote: > > On Fri, Jun 29, 2018 at 12:15:21PM +0100, Suzuki K Poulose wrote: > > > virtio-mmio with virtio-v1 uses a 32bit PFN for the queue. > > > If the queue pfn is too large to fit in 32bits, which > > > we could hit on arm64 systems with 52bit physical addresses > > > (even with 64K page size), we simply miss out a proper link > > > to the other side of the queue. > > > > > > Add a check to validate the PFN, rather than silently breaking > > > the devices. > > > > > > Cc: "Michael S. Tsirkin" > > > Cc: Jason Wang > > > Cc: Marc Zyngier > > > Cc: Christoffer Dall > > > Cc: Peter Maydel > > > Cc: Jean-Philippe Brucker > > > Signed-off-by: Suzuki K Poulose > > > --- > > > Changes since v2: > > > - Change errno to -E2BIG > > > --- > > > drivers/virtio/virtio_mmio.c | 18 ++++++++++++++++-- > > > 1 file changed, 16 insertions(+), 2 deletions(-) > > > > > > diff --git a/drivers/virtio/virtio_mmio.c b/drivers/virtio/virtio_mmio.c > > > index 67763d3..82cedc8 100644 > > > --- a/drivers/virtio/virtio_mmio.c > > > +++ b/drivers/virtio/virtio_mmio.c > > > @@ -397,9 +397,21 @@ static struct virtqueue *vm_setup_vq(struct virtio_device *vdev, unsigned index, > > > /* Activate the queue */ > > > writel(virtqueue_get_vring_size(vq), vm_dev->base + VIRTIO_MMIO_QUEUE_NUM); > > > if (vm_dev->version == 1) { > > > + u64 q_pfn = virtqueue_get_desc_addr(vq) >> PAGE_SHIFT; > > > + > > > + /* > > > + * virtio-mmio v1 uses a 32bit QUEUE PFN. If we have something > > > + * that doesn't fit in 32bit, fail the setup rather than > > > + * pretending to be successful. > > > + */ > > > + if (q_pfn >> 32) { > > > + dev_err(&vdev->dev, "virtio-mmio: queue address too large\n"); > > > > How about: > > "hypervisor bug: legacy virtio-mmio must not be used with more than 0x%llx Gigabytes of memory", > > 0x1ULL << (32 - 30) << PAGE_SHIFT > > nit : Do we need change "hypervisor" => "platform" ? Virtio is used by other > tools (e.g, emulators) and not just virtual machines. > > Suzuki OK.