Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Subject: Re: [Xen-devel] [PATCH] xen-swiotlb: use actually allocated size on
 check physical contiguous
To:     Dongli Zhang <dongli.zhang@oracle.com>,
        "xen-devel@lists.xenproject.org" <xen-devel@lists.xenproject.org>
Cc:     Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>,
        John Sobecki <john.sobecki@oracle.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
References: <d578b69a-848b-2c86-175a-1b1933d82a36@oracle.com>
 <f3befca2-fc65-81b8-c9ed-311de7967958@oracle.com>
From:   Joe Jin <joe.jin@oracle.com>
Message-ID: <5bb5e41f-ed6c-87d0-a1b1-d053c191a8d5@oracle.com>
Date:   Fri, 7 Sep 2018 15:47:50 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0)
 Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <f3befca2-fc65-81b8-c9ed-311de7967958@oracle.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

Anybody would like to help review this patch?

Thanks,
Joe

On 09/05/2018 02:16 AM, Joe Jin wrote                                           
> xen_swiotlb_{alloc,free}_coherent() actually allocate/free size by order      
> but used the required size to check if address is physical contiguous,        
> if first pages are physical contiguous also passed                            
> range_straddles_page_boundary() check, but others were not it will            
> lead kernel panic.                                                            
>                                                                               
> Signed-off-by: Joe Jin <joe.jin@oracle.com>                                   
> Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>                            
> ---                                                                           
>  drivers/xen/swiotlb-xen.c | 6 ++++++                                         
>  1 file changed, 6 insertions(+)                                              
>                                                                               
> diff --git a/drivers/xen/swiotlb-xen.c b/drivers/xen/swiotlb-xen.c            
> index a6f9ba85dc4b..aa081f806728 100644                                       
> --- a/drivers/xen/swiotlb-xen.c                                               
> +++ b/drivers/xen/swiotlb-xen.c                                               
> @@ -303,6 +303,9 @@ xen_swiotlb_alloc_coherent(struct device *hwdev, size_t size,
>       */                                                                      
>       flags &= ~(__GFP_DMA | __GFP_HIGHMEM);                                  
>                                                                               
> +     /* Convert the size to actually allocated. */                           
> +     size = 1UL << (order + XEN_PAGE_SHIFT);                                 
> +                                                                             
>       /* On ARM this function returns an ioremap'ped virtual address for      
>        * which virt_to_phys doesn't return the corresponding physical         
>        * address. In fact on ARM virt_to_phys only works for kernel direct    
> @@ -351,6 +354,9 @@ xen_swiotlb_free_coherent(struct device *hwdev, size_t size, void *vaddr,
>        * physical address */                                                  
>       phys = xen_bus_to_phys(dev_addr);                                       
>                                                                               
> +     /* Convert the size to actually allocated. */                           
> +     size = 1UL << (order + XEN_PAGE_SHIFT);                                 
> +                                                                             
>       if (((dev_addr + size - 1 <= dma_mask)) ||                              
>           range_straddles_page_boundary(phys, size))                          
>               xen_destroy_contiguous_region(phys, order);                     
>