Received: by 2002:ac0:a582:0:0:0:0:0 with SMTP id m2-v6csp4639672imm; Mon, 15 Oct 2018 19:39:50 -0700 (PDT) X-Google-Smtp-Source: ACcGV62W1aVs4E588DtzT35zm5UrCSlzxLCSilkmp99I2lj7itLp/oQI3hUf2mlROcFMY/UOGOdH X-Received: by 2002:a63:e442:: with SMTP id i2-v6mr18558960pgk.381.1539657590418; Mon, 15 Oct 2018 19:39:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1539657590; cv=none; d=google.com; s=arc-20160816; b=dJKlq3VnCITEyeI84r/LVRfk9WabAtH1DD06NOMIQZE0y2npYRxcDKsFQ2VqIvqhZ0 NJ9k7igArqLmYy4RC1tvKaGrUzCBTD5Dj9iBhIi7DpiFk2H7mzkSAfUGY4VNsZiErU5l 9bqkBhh1QEhMOGhLJPIzvJ20QFZFaPWEeihKMHc5vVB19/+XbDopaAP4GLREBLKjNGZ0 ch7fWCiiEMMUEeb5eAlwX30VtGDzTdQTQhOv6XOwhHeZKMW6TPfudubjeKxmrqBdPd7u bmIyl+NqNyPCKCXneJLCtVpUH5v46fgKfTdP95Hrods3nqqs6nDzyqvmSFC9qur4ZtnL fOow== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:date:subject:cc:to:from :dkim-signature; bh=Z8Pa5S74QnhACppW56tfiG6NUGrruO4AXQrEks17+Eg=; b=q7rjx/PbxOQheXZL5yN861zAdYQ+oo/RGgvBF1ur0s20zeR3hspAZysgfwmlXD0kc7 DE/PLclRwSJrTXVq9rnAW0SJ2zCQtfOhL6508Di++SxiKktLXYaVwnDaPK8AgPDA6lEK qo3yzvltgj5AU/M1cQcao8TGlDgCD+jPGbmf7zDdtDj3UR/Mnx2DBhvv/HaP6RND6IKX xjdiLwVEKd+KlRh+8W48BtL0Ti4QrjeH8+gnV0BZ3U5ilXokgaL3PC/zPLHfP0/uUR0y UROHrkiAMQ911VI9M/sGZLtU/V1DfbkNBBZ5gCztG1Ge3wLut7OVkgSewBHcD7d6N/O+ 9iaw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=CprU3anZ; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id d81-v6si13689524pfm.40.2018.10.15.19.39.33; Mon, 15 Oct 2018 19:39:50 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=CprU3anZ; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726978AbeJPK1P (ORCPT + 99 others); Tue, 16 Oct 2018 06:27:15 -0400 Received: from mail-pf1-f195.google.com ([209.85.210.195]:38107 "EHLO mail-pf1-f195.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726944AbeJPK1P (ORCPT ); Tue, 16 Oct 2018 06:27:15 -0400 Received: by mail-pf1-f195.google.com with SMTP id f29-v6so10657553pff.5; Mon, 15 Oct 2018 19:39:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=Z8Pa5S74QnhACppW56tfiG6NUGrruO4AXQrEks17+Eg=; b=CprU3anZ9X9fFxPqhsiWC4DJ6jIdpli14t2bdh3CeWsP1J92VIfpr1lchoHcrmrbnz mIPALq7RVC1jBSQ6mBBYK10YYS6iBAgdnC69Z+eZaSw6tolyQJGNUDmim8b/QvkmtA5D apgvR6Kb2vm6nek4JczGGWCQRApAiuagBi0V5MikNQ8IbZm+1wOc+6jDtx4bdBPnOT+4 /FnnHfGkEcfxd3gyeq4Na5an5OXCz8W4NUYVelhRMeHZYMKTaLnf6Ul9zBZ11xNkvULY lwLppWhxajzYgbEWChyODEg4gilCwaBc6zHXYXA6vFPqGH67iiGNFogwfEzwHpgV2ZK1 rtDQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=Z8Pa5S74QnhACppW56tfiG6NUGrruO4AXQrEks17+Eg=; b=hkdV1k6MdSzUrtwle4Q4IEB3eb1X+Zz9AEVBbLhIaECQRbqZEZdG5dtpZzo/oZcW6L vbnub84oIksBVZbl4Q7cNN2E6W6nfSpSoDLxPDeofoVznL6C1iRaaalBFCSkFOnnMkCd jfTm1Y2pVHt9Jrz/jyTndTeVnNPju3hHK7m987G68oPJjMlIdWpz4SijvD29eYdjfOW/ AfX4Uu+CEWnhynRDw7LsgnbSUho2+KbtURHN4a/tjHzzt7nRVfn8dM5BHJV2HaIeGM7L IRU0geU09zgtxqJFdv/Sa8AqcmScElm5mzcb4PYLKNZlK7ehG08x0uSKeTjjkoXZKFRM ojUQ== X-Gm-Message-State: ABuFfoilyYbtoKdk4DplwpLctLKMjVASVOxSF6yy7KlPsmOxAL5RW8a4 xqBHrRbtEJmkXfznTQM1DGzORy/w X-Received: by 2002:a62:c186:: with SMTP id i128-v6mr20204723pfg.248.1539657550997; Mon, 15 Oct 2018 19:39:10 -0700 (PDT) Received: from localhost.localdomain (c-24-6-192-50.hsd1.ca.comcast.net. [24.6.192.50]) by smtp.gmail.com with ESMTPSA id u79-v6sm18620287pfd.117.2018.10.15.19.39.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 15 Oct 2018 19:39:10 -0700 (PDT) From: frowand.list@gmail.com To: Rob Herring , Pantelis Antoniou , Michael Ellerman , Benjamin Herrenschmidt , Paul Mackerras , Alan Tull , Moritz Fischer Cc: linux-kernel@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, devicetree@vger.kernel.org, linux-fpga@vger.kernel.org Subject: [PATCH v4 00/18] of: overlay: validation checks, subsequent fixes Date: Mon, 15 Oct 2018 19:37:20 -0700 Message-Id: <1539657458-24401-1-git-send-email-frowand.list@gmail.com> X-Mailer: git-send-email 1.9.1 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Frank Rowand Add checks to (1) overlay apply process and (2) memory freeing triggered by overlay release. The checks are intended to detect possible memory leaks and invalid overlays. The checks revealed bugs in existing code. Fixed the bugs. While fixing bugs, noted other issues, which are fixed in separate patches. ***** Powerpc folks: I was not able to test the patches that ***** directly impact Powerpc systems that use dynamic ***** devicetree. Please review that code carefully and ***** test. The specific patches are: 03/16, 04/16, 07/16 FPGA folks: I made the validation checks that should result in an invalid live devicetree report "ERROR" and cause the overlay apply to fail. I made the memory leak validation tests report "WARNING" and allow the overlay apply to complete successfully. Please let me know if you encounter the warnings. There are at least two paths forward to deal with the cases that trigger the warning: (1) change the warning to an error and fail the overlay apply, or (2) find a way to detect the potential memory leaks and free the memory appropriately. ALL people: The validations do _not_ address another major concern I have with releasing overlays, which is use after free errors. Changes since v3: - 01/18: Add expected value of refcount for destroy cset entry error. Also explain the cause of the error. - 09/18: for errors of an overlay changing the value of #size-cells or #address-cells, return -EINVAL so that overlay apply will fail - 09/18: for errors of an overlay changing the value of #size-cells or #address-cells, make the message more direct. Old message: OF: overlay: ERROR: overlay and/or live tree #size-cells invalid in node /soc/base_fpga_region New message: OF: overlay: ERROR: changing value of /soc/base_fpga_region/#size-cells not allowed - 13/18: Update patch comment header to state that this patch modifies the previous patch to not return immediately on fragment error and explain this is not a performance issue. - 13/18: remove redundant "overlay" from two error messages. "OF: overlay:" is already present in pr_fmt() Changes since v2: - 13/18: Use continue to reduce indentation in find_dup_cset_node_entry() and find_dup_cset_prop() Changes since v1: - move patch 16/16 to 17/18 - move patch 15/16 to 18/18 - new patch 15/18 - new patch 16/18 - 05/18: add_changeset_node() header comment: incorrect comment for @target - 18/18: add same fix for of_parse_phandle_with_args() - 18/18: add same fix for of_parse_phandle_with_args_map() Frank Rowand (18): of: overlay: add tests to validate kfrees from overlay removal of: overlay: add missing of_node_put() after add new node to changeset of: overlay: add missing of_node_get() in __of_attach_node_sysfs powerpc/pseries: add of_node_put() in dlpar_detach_node() of: overlay: use prop add changeset entry for property in new nodes of: overlay: do not duplicate properties from overlay for new nodes of: dynamic: change type of of_{at,de}tach_node() to void of: overlay: reorder fields in struct fragment of: overlay: validate overlay properties #address-cells and #size-cells of: overlay: make all pr_debug() and pr_err() messages unique of: overlay: test case of two fragments adding same node of: overlay: check prevents multiple fragments add or delete same node of: overlay: check prevents multiple fragments touching same property of: unittest: remove unused of_unittest_apply_overlay() argument of: overlay: set node fields from properties when add new overlay node of: unittest: allow base devicetree to have symbol metadata of: unittest: find overlays[] entry by name instead of index of: unittest: initialize args before calling of_*parse_*() arch/powerpc/platforms/pseries/dlpar.c | 15 +- arch/powerpc/platforms/pseries/reconfig.c | 6 +- drivers/of/dynamic.c | 68 +++-- drivers/of/kobj.c | 4 +- drivers/of/overlay.c | 302 ++++++++++++++++----- drivers/of/unittest-data/Makefile | 2 + .../of/unittest-data/overlay_bad_add_dup_node.dts | 28 ++ .../of/unittest-data/overlay_bad_add_dup_prop.dts | 24 ++ drivers/of/unittest-data/overlay_base.dts | 1 + drivers/of/unittest.c | 96 +++++-- include/linux/of.h | 19 +- 11 files changed, 443 insertions(+), 122 deletions(-) create mode 100644 drivers/of/unittest-data/overlay_bad_add_dup_node.dts create mode 100644 drivers/of/unittest-data/overlay_bad_add_dup_prop.dts -- Frank Rowand