Received: by 2002:a25:d7c1:0:0:0:0:0 with SMTP id o184csp4036872ybg; Fri, 25 Oct 2019 12:24:29 -0700 (PDT) X-Google-Smtp-Source: APXvYqyfay3V0nz/ElQkIH4ed7CummuVCutNFuCyW9lwfNbBilLC7y3mRjmoOTjK2BcQeR1+LkA4 X-Received: by 2002:a17:907:3301:: with SMTP id ym1mr5192938ejb.106.1572031469881; Fri, 25 Oct 2019 12:24:29 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1572031469; cv=none; d=google.com; s=arc-20160816; b=KmLfRvEdiOGv7qKLv5HvOXrr974eMgn+V/WXEhg0zUVkF1EfFkKrpvEABMQ6mNG4W7 KSbGCkZe1rzgdZaustaA1elKJ0oqCqwAK7G5/ELBfcQbQmo/G5n8WLN6hA4AK0K53Qph uCVgNBNU1KCOlHxrV22I7iCYhRZtG0iOt3ahQSUCd/r/3MGTfAqo8JlXzokwgrRdLgUW gvLh9mVRAD07HpLncOtj7YnHiq3HZ6OtBY0xehKORtKRx/4RRUE4W3c0gcYX127HNrxf qetY2W+zhRqMx16Bmu07jlxjBJ5MgrmL/j8aL0NXKoUx8g56BsBBLUaxOqmT2vmTw+e3 L90Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:content-transfer-encoding :mime-version:references:in-reply-to:date:subject:cc:to:from; bh=ZVOwHVoNWypPClugu7KhC17PsaUmrEk11SBA1+R+DoE=; b=sjYl9rVIMdZx9TMLr4MuPKN511OPhNsvrU6396w53p1TsCwqFw+6M3WbJNkx5aZP7P eNiTpUayrd3Z1Gwzt79f3Andcc4VCSfCjexfFXvrgwJneL1vRtTx0VKWiWIahwSC7TiH NjhAE7RUYUHnffeKByZg/EsvM2MnpvBgp3zj7myoHzBYaDWXmw3uA83GG6UqWdZ+a3ht +cSeVKAnkTq5C4QZh2ydFjGFhqp1KNWRiYN/rTvwfKXsUscKxszGZOWR0+gOhV29gnQ0 bHXcCJq9UlV3D2m6nwnnY6HQnOOo800g+p/Uh/+aPrjzKF6ZZ0MxvzWhrhKuziN/oaNj F4MA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ibm.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id v13si2498242edb.164.2019.10.25.12.24.06; Fri, 25 Oct 2019 12:24:29 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ibm.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2390768AbfJYEsx (ORCPT + 99 others); Fri, 25 Oct 2019 00:48:53 -0400 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:46778 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S2387990AbfJYEsx (ORCPT ); Fri, 25 Oct 2019 00:48:53 -0400 Received: from pps.filterd (m0098421.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.27/8.16.0.27) with SMTP id x9P4lgDk097139 for ; Fri, 25 Oct 2019 00:48:51 -0400 Received: from e06smtp04.uk.ibm.com (e06smtp04.uk.ibm.com [195.75.94.100]) by mx0a-001b2d01.pphosted.com with ESMTP id 2vuqehvdbt-1 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 25 Oct 2019 00:48:51 -0400 Received: from localhost by e06smtp04.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Fri, 25 Oct 2019 05:48:49 +0100 Received: from b06cxnps3074.portsmouth.uk.ibm.com (9.149.109.194) by e06smtp04.uk.ibm.com (192.168.101.134) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256/256) Fri, 25 Oct 2019 05:48:40 +0100 Received: from d06av24.portsmouth.uk.ibm.com (d06av24.portsmouth.uk.ibm.com [9.149.105.60]) by b06cxnps3074.portsmouth.uk.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id x9P4mdPE61210666 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Fri, 25 Oct 2019 04:48:39 GMT Received: from d06av24.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 96CDB42047; Fri, 25 Oct 2019 04:48:39 +0000 (GMT) Received: from d06av24.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id ED78142041; Fri, 25 Oct 2019 04:48:38 +0000 (GMT) Received: from ozlabs.au.ibm.com (unknown [9.192.253.14]) by d06av24.portsmouth.uk.ibm.com (Postfix) with ESMTP; Fri, 25 Oct 2019 04:48:38 +0000 (GMT) Received: from adsilva.ozlabs.ibm.com (haven.au.ibm.com [9.192.254.114]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.au.ibm.com (Postfix) with ESMTPSA id 41E23A0147; Fri, 25 Oct 2019 15:48:37 +1100 (AEDT) From: "Alastair D'Silva" To: alastair@d-silva.org Cc: David Hildenbrand , Michal Hocko , Benjamin Herrenschmidt , Paul Mackerras , Michael Ellerman , Frederic Barrat , Andrew Donnellan , Arnd Bergmann , Greg Kroah-Hartman , Dan Williams , Vishal Verma , Dave Jiang , Keith Busch , Ira Weiny , Anton Blanchard , Geert Uytterhoeven , Krzysztof Kozlowski , Vasant Hegde , Hari Bathini , =?UTF-8?q?C=C3=A9dric=20Le=20Goater?= , Mahesh Salgaonkar , Thomas Gleixner , Greg Kurz , David Gibson , Masahiro Yamada , Nicholas Piggin , Alexey Kardashevskiy , Andrew Morton , Oscar Salvador , Pavel Tatashin , Wei Yang , Qian Cai , linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org, linux-nvdimm@lists.01.org, linux-mm@kvack.org Subject: [PATCH 01/10] memory_hotplug: Add a bounds check to __add_pages Date: Fri, 25 Oct 2019 15:46:56 +1100 X-Mailer: git-send-email 2.21.0 In-Reply-To: <20191025044721.16617-1-alastair@au1.ibm.com> References: <20191025044721.16617-1-alastair@au1.ibm.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-TM-AS-GCONF: 00 x-cbid: 19102504-0016-0000-0000-000002BD3B45 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 19102504-0017-0000-0000-0000331E830D Message-Id: <20191025044721.16617-2-alastair@au1.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2019-10-25_02:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=1 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1908290000 definitions=main-1910250045 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Alastair D'Silva On PowerPC, the address ranges allocated to OpenCAPI LPC memory are allocated from firmware. These address ranges may be higher than what older kernels permit, as we increased the maximum permissable address in commit 4ffe713b7587 ("powerpc/mm: Increase the max addressable memory to 2PB"). It is possible that the addressable range may change again in the future. In this scenario, we end up with a bogus section returned from __section_nr (see the discussion on the thread "mm: Trigger bug on if a section is not found in __section_nr"). Adding a check here means that we fail early and have an opportunity to handle the error gracefully, rather than rumbling on and potentially accessing an incorrect section. Further discussion is also on the thread ("powerpc: Perform a bounds check in arch_add_memory") http://lkml.kernel.org/r/20190827052047.31547-1-alastair@au1.ibm.com Signed-off-by: Alastair D'Silva Reviewed-by: David Hildenbrand Acked-by: Michal Hocko --- mm/memory_hotplug.c | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/mm/memory_hotplug.c b/mm/memory_hotplug.c index df570e5c71cc..2cecf07b396f 100644 --- a/mm/memory_hotplug.c +++ b/mm/memory_hotplug.c @@ -278,6 +278,23 @@ static int check_pfn_span(unsigned long pfn, unsigned long nr_pages, return 0; } +static int check_hotplug_memory_addressable(unsigned long pfn, + unsigned long nr_pages) +{ + const u64 max_addr = PFN_PHYS(pfn + nr_pages) - 1; + + if (max_addr >> MAX_PHYSMEM_BITS) { + const u64 max_allowed = (1ull << (MAX_PHYSMEM_BITS + 1)) - 1; + + WARN(1, + "Hotplugged memory exceeds maximum addressable address, range=%#llx-%#llx, maximum=%#llx\n", + PFN_PHYS(pfn), max_addr, max_allowed); + return -E2BIG; + } + + return 0; +} + /* * Reasonably generic function for adding memory. It is * expected that archs that support memory hotplug will @@ -291,6 +308,10 @@ int __ref __add_pages(int nid, unsigned long pfn, unsigned long nr_pages, unsigned long nr, start_sec, end_sec; struct vmem_altmap *altmap = restrictions->altmap; + err = check_hotplug_memory_addressable(pfn, nr_pages); + if (err) + return err; + if (altmap) { /* * Validate altmap is within bounds of the total request -- 2.21.0