Received: by 2002:a05:6a10:16a7:0:0:0:0 with SMTP id gp39csp1090441pxb; Fri, 13 Nov 2020 04:06:04 -0800 (PST) X-Google-Smtp-Source: ABdhPJwtS+3+vv78sRR67niyyU+PON9Qkq6RfLq0sz/jTI+6GbVfJogOLTDwF/tEw2OvtwgRq43W X-Received: by 2002:a17:906:a88:: with SMTP id y8mr1684971ejf.469.1605269164307; Fri, 13 Nov 2020 04:06:04 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1605269164; cv=none; d=google.com; s=arc-20160816; b=FGVXrfm1xGKQIxgWs2kDg8HaX6/HQV4ZqGvHiju/U55zGRbatSJQepRKVyb2FqA4AE tZjrMNVEWDjOygDMF/64mbBNxLP7KFNhCr4yL2x7/kmyHTEFneosLKB7eK7CqZU8SE5e txdm11vngk8tK5IKvMHPL/a5fyF0xchXYZuA2HLXZ+dbWzLyiq2kz7E0oxx1NrnFJtc4 xFHC8vJ9x4lqJnbFnVfG2hYO1RExS4s1pI4aVQNYhH+Q9KRRkFm8GliK0kcExdbdnLsQ bHez/0N2OCsb3YLofS+W9It9QokGn38lzrJSFRs8s6a44M5Apr5FU5oYhI92I6cQ9tqP TNMQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:user-agent:in-reply-to:content-disposition :mime-version:references:message-id:subject:cc:to:from:date; bh=d1KWoyCxIzbC720+xBKrOQK15eEM1twXcAUiyfQaowY=; b=fq6QZMGjjPaa5DfCcHxVqDdsyInYU+gyFC7x4tNfBnwzR2DLL3maMAD9FdtLWwWDGx NW5SQ7MoNwwtYREgug9rLG4mLYuwlXTv/tjtPEVFaEhVTPaNYzF/DfzZV2VioKJ12yqg bcopOeF1d5RG312gkUpbyGUsvVNnvtAczrv8/BnSAzOHDTzxgHjU/fZZ3XUEW6vBzWk7 NgHc2z+FFwdfl8YZEsYRLmhPwlKYNzn8vmf5Nj0Y0X7rM6MtK2X6bQVDR9Q0sTPc+ubD CtpUYnerG6Svl3GoInPDntPi1WLLSOXaBT3fJj0NWDCI6QLd3cYBIt5Q2ftiivCo0UYc nleg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id r23si6206583eds.96.2020.11.13.04.05.39; Fri, 13 Nov 2020 04:06:04 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726876AbgKMMD1 (ORCPT + 99 others); Fri, 13 Nov 2020 07:03:27 -0500 Received: from mail-wm1-f65.google.com ([209.85.128.65]:39512 "EHLO mail-wm1-f65.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726405AbgKMLot (ORCPT ); Fri, 13 Nov 2020 06:44:49 -0500 Received: by mail-wm1-f65.google.com with SMTP id s13so8115959wmh.4 for ; Fri, 13 Nov 2020 03:44:47 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=d1KWoyCxIzbC720+xBKrOQK15eEM1twXcAUiyfQaowY=; b=TJMSiKZwfoPAuxjMDtiJxTcbX65Aj1s3rjdS8vY0OTPtBlikaM+m9o3hVd2KGbtxbJ z5Qk5O3Y9XWRwiMOkE/j/AESMFRoHp4j74bzsQChNkvZCpQixrk6IT3sq2JdpBKqdSeV R2ZehS2D88MAycjqOaK1bPfrLwERqRPsUZUapryoowIA/A+NHqnYqAvJkfGIIvxwA/MW pWXGFnxBneCKyLZVlhafrbrsffDTbhd+jLbB4dOTcfCJLedgwAH7/wp0NiOBNg81ZR7I S9+6geBqvMb+DVvTKvF1y1vqhQq2A+xUILsWIkOidXi7Mcxvb19TT/NoAS303Ve86OOD /G6Q== X-Gm-Message-State: AOAM5339GCmayBJHuUrJnR9E9NSwMIFK/GHkDZ5PNuVcAThMAJDMwDWu jE7FEh0VvvTboZxUKXSPdkQTAGfxeIM= X-Received: by 2002:a1c:398a:: with SMTP id g132mr2151643wma.51.1605267223132; Fri, 13 Nov 2020 03:33:43 -0800 (PST) Received: from liuwe-devbox-debian-v2 ([51.145.34.42]) by smtp.gmail.com with ESMTPSA id z189sm5194304wme.23.2020.11.13.03.33.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Nov 2020 03:33:42 -0800 (PST) Date: Fri, 13 Nov 2020 11:33:41 +0000 From: Wei Liu To: "Andrea Parri (Microsoft)" Cc: linux-kernel@vger.kernel.org, "K . Y . Srinivasan" , Haiyang Zhang , Stephen Hemminger , Wei Liu , linux-hyperv@vger.kernel.org, Andres Beltran , Michael Kelley , Saruhan Karademir , Juan Vazquez , Jakub Kicinski , "David S. Miller" , netdev@vger.kernel.org Subject: Re: [PATCH v9 3/3] hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening Message-ID: <20201113113341.kwc2fwpqzhqztgms@liuwe-devbox-debian-v2> References: <20201109100402.8946-1-parri.andrea@gmail.com> <20201109100402.8946-4-parri.andrea@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20201109100402.8946-4-parri.andrea@gmail.com> User-Agent: NeoMutt/20180716 Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Nov 09, 2020 at 11:04:02AM +0100, Andrea Parri (Microsoft) wrote: > From: Andres Beltran > > Currently, pointers to guest memory are passed to Hyper-V as > transaction IDs in netvsc. In the face of errors or malicious > behavior in Hyper-V, netvsc should not expose or trust the transaction > IDs returned by Hyper-V to be valid guest memory addresses. Instead, > use small integers generated by vmbus_requestor as requests > (transaction) IDs. > > Signed-off-by: Andres Beltran > Co-developed-by: Andrea Parri (Microsoft) > Signed-off-by: Andrea Parri (Microsoft) > Reviewed-by: Michael Kelley > Acked-by: Jakub Kicinski > Cc: "David S. Miller" > Cc: Jakub Kicinski > Cc: netdev@vger.kernel.org Reviewed-by: Wei Liu