Received: by 2002:a05:6358:a55:b0:ec:fcf4:3ecf with SMTP id 21csp1373164rwb; Thu, 19 Jan 2023 09:45:13 -0800 (PST) X-Google-Smtp-Source: AMrXdXuB3afhXtr2H+H/OvVlO1hDtylH+uOtfvlV2riMjed65H2UruHxQHhpipr7JgTEGGrZkV4k X-Received: by 2002:aa7:874c:0:b0:58d:a1e9:36d with SMTP id g12-20020aa7874c000000b0058da1e9036dmr12203064pfo.31.1674150313637; Thu, 19 Jan 2023 09:45:13 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1674150313; cv=none; d=google.com; s=arc-20160816; b=xrFU9VyIgOuMSazRL4sWlGLxFFMzkL9LVOy0XA/EsFep4LANnXv1MapEzu+NMfmCUx z0jbYejmy27610JgQROm4Klc6XLgqnnPGAGBWmIyBMkZEoO7oxfC4HOtizR1p3OrRcZN GWNZvfIqiX9oAilE/WecO46W58X8/6FLP3p6nViTmfeIPwF47wOk7leaC8LxL+ZWEnxe oXEdC8lok2feDCcHoHyeLcizUMJunsM6nMgnhXkDP/JyG+nSp7QfpqGob9g3+tQAktkk hZZnXYC9Aev7EiMra+pYSD9ddsY0UGU72xHoXC65oNcV0eaKA/fGZTNj7a19CthdQobE yfLQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=hY/uGP890IinrmcgktrZL7Gc8NoyEydJ+vU3kBSF4yM=; b=d1yuDKQVyD3dZvKelphqW79/ZDw3CkFotrnQqwwcGmxfvjfQKUQDYeil96pJUizvKN tym1P3v2FNGgS3me0pUC8pkb2bmyPcOsRBoZqqO9VLYxv74NWJ9h3l45wCgCoosPglGt 3sIxUQhgPuLek3ohHW/F9W1ly/iKVbsPcMLK9AgvrCZe8+IbnV+9LNPIZfWzQjHHHkGL gOSJluA5Erscjgwxds7jqOrW+l1EUX9nM6rrWGi7f7RtWb6hJ3dFE+SMopsw/vidw3tN HkFZ2lg9tbM8rhamZ8NP+pCAT5rIvckSFgFyKRA7nEVPhxneAHjYTslFmJU/Ro1hsLqn 1X8Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b="cNQ/CKiR"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id y71-20020a62644a000000b0058a71b56a06si27772240pfb.130.2023.01.19.09.45.07; Thu, 19 Jan 2023 09:45:13 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b="cNQ/CKiR"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229818AbjASRKt (ORCPT + 45 others); Thu, 19 Jan 2023 12:10:49 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:54194 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229964AbjASRKp (ORCPT ); Thu, 19 Jan 2023 12:10:45 -0500 Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 4138F872BF; Thu, 19 Jan 2023 09:10:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1674148239; x=1705684239; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=bhthSGOnd5mtZVdhRqBp03RIkiK20hhGEQnqr2CdGfw=; b=cNQ/CKiRwsyGpoc/4dLBFZzykhBVi154dwwroi6CVhtWoQNvSjLnYYiu BVziKcm7+lT9yzepDDbN/96E8JBTHQrKillLO6B01eSolwnOAfaPwGJL4 KM34qb6kNugCaLbZmjKodO9eTWGMDNk6XIef7Wyqqa9GD9XMzJ64nUTCK QBrgcKrwHPLwPYATVB5UeMigmq4zxilgvlYeMbONl8TegMrXyoRmkO76G HUmYRvnJruZyYwlH79+ikOA7MX9shACoFddFmuuC6uaawTPOpkchi/qJ6 zuA8RD107bWgFZpUWA93lL5bxTtDHg5HbF23eNzWL420H8VxmtKD+ilvC Q==; X-IronPort-AV: E=McAfee;i="6500,9779,10595"; a="305714639" X-IronPort-AV: E=Sophos;i="5.97,229,1669104000"; d="scan'208";a="305714639" Received: from orsmga004.jf.intel.com ([10.7.209.38]) by fmsmga107.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 19 Jan 2023 09:06:17 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6500,9779,10595"; a="784124757" X-IronPort-AV: E=Sophos;i="5.97,229,1669104000"; d="scan'208";a="784124757" Received: from black.fi.intel.com (HELO black.fi.intel.com.) ([10.237.72.28]) by orsmga004.jf.intel.com with ESMTP; 19 Jan 2023 09:06:13 -0800 From: Alexander Shishkin To: Bjorn Helgaas , Thomas Gleixner , linux-pci@vger.kernel.org Cc: linux-kernel@vger.kernel.org, Marc Zyngier , darwi@linutronix.de, elena.reshetova@intel.com, kirill.shutemov@linux.intel.com, Alexander Shishkin Subject: [PATCH 0/2] PCI/MSI: Hardening fixes Date: Thu, 19 Jan 2023 19:06:31 +0200 Message-Id: <20230119170633.40944-1-alexander.shishkin@linux.intel.com> X-Mailer: git-send-email 2.39.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-4.3 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_EF,RCVD_IN_DNSWL_MED,SPF_HELO_NONE, SPF_NONE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, Here are 2 hardening fixes around MSIX table size/offset handling, aiming to prevent a malicious device or VMM from triggering bugs by supplying bogus values. Alexander Shishkin (2): PCI/MSI: Cache the MSIX table size PCI/MSI: Validate device supplied MSI table offset and size drivers/pci/msi/api.c | 7 ++++++- drivers/pci/msi/msi.c | 12 +++++++++--- include/linux/pci.h | 1 + 3 files changed, 16 insertions(+), 4 deletions(-) -- 2.39.0