Received: by 2002:a05:7412:d1aa:b0:fc:a2b0:25d7 with SMTP id ba42csp1720393rdb; Wed, 31 Jan 2024 07:14:32 -0800 (PST) X-Google-Smtp-Source: AGHT+IEE+BTWPWgJWJ7oPzKyrOBu3Jz36RoMRS6yZBtslhsgzjtkJINijRJRafr4vM7OW2phTnem X-Received: by 2002:a17:906:b789:b0:a35:f706:5a70 with SMTP id dt9-20020a170906b78900b00a35f7065a70mr1448800ejb.36.1706714072498; Wed, 31 Jan 2024 07:14:32 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1706714072; cv=pass; d=google.com; s=arc-20160816; b=ee0cTVRcAg9PbbVMmDpJkayzV/VqmNhKJxTD4/LadvIJYPJPgNcDiE3fESRoh6+vyo yFX/rhvgSGq6GxFHBX1HNEwm5Urx0icC591SjjesqsjVEAzffwe/nMYkJe0WPhq+i6PG P05Xlq7LrveOXbaNY9D/9hB2xNpilnlXqijQk1T3yzM4UTnK1FtjuFv2hi0EWdslOwMK i15nKPQ1yNKnttH7We64QehRgRv58mqfDbuisirGtEeGcV96/cy5Q8TA5N4V9Gv7FokS I4ToKWaM23OVXP6OiYFxV/Ag9rBbvu/pAKwDKnzCuLs7vyyEe1q6AuE6yURYcil/Ir8Q 3CDQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:date:message-id; bh=LUO1FvqUOOI49WhjxODzbDvf4fM1v8ny4MGYM22D02s=; fh=kgp4YeaGuQxzmm87AuAipaaV+yDhXE4cdrPUjJnH7oo=; b=tPm1srBC0WMW2f0QUPfCr9McSvPYVDUA7Ve6oeZOtTMC5e/sKxzRvYTqhEwvAN/itK mvGAWYbVA6e15AwnQjIb0VeAoC+hrCaIpzwyYfayYY1uHSAwo+lsh72uuG1D7A2HbPmA VBdkmvYypvG7I2ZomtGHZZHt9D9P/I0tK7NdXiUsguO+NOgK64+l9LY5WTDdIllAl/gU rgh4zmjlSKtl07yoKB2biL6fd8Dz73qtgWqNOz/De8eUp9GaiAR8DXJ7MvignbaDiiSS NhNDwKGRx8KI7wF9tPQj3A7fbqbl53bdxrLT/2rN26PwiYoJs3GD5RuNuyyAcGLb0i+S KjxA==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; arc=pass (i=1 spf=pass spfdomain=arm.com dmarc=pass fromdomain=arm.com); spf=pass (google.com: domain of linux-kernel+bounces-46695-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) smtp.mailfrom="linux-kernel+bounces-46695-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=arm.com X-Forwarded-Encrypted: i=1; AJvYcCXli6EDWR9SmqqbFtY9WSaj5WEcUFnYuAd3rk33HmPlvX/ra8Ctlt0WLldbn6H390SfA0DUJf0w2Fv9OdBc1eVfYhhiznvgJjGZa+gCYQ== Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [147.75.80.249]) by mx.google.com with ESMTPS id p12-20020a17090628cc00b00a351b4ca4desi5119834ejd.792.2024.01.31.07.14.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 31 Jan 2024 07:14:32 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-46695-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249; Authentication-Results: mx.google.com; arc=pass (i=1 spf=pass spfdomain=arm.com dmarc=pass fromdomain=arm.com); spf=pass (google.com: domain of linux-kernel+bounces-46695-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) smtp.mailfrom="linux-kernel+bounces-46695-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=arm.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id 3FD001F20FA9 for ; Wed, 31 Jan 2024 15:14:32 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 13F2C84A50; Wed, 31 Jan 2024 15:14:25 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by smtp.subspace.kernel.org (Postfix) with ESMTP id C20C262A09 for ; Wed, 31 Jan 2024 15:14:21 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=217.140.110.172 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1706714064; cv=none; b=QtWN36SLeqLEajPueG4b/Eqqm4QU1Ej8bKRRxcprIzjgU2zYkqwfFxUioHJ7ppVXv8Pb4yjLA6dP2lJ7bUdzyraBP44yPa5pdpC3Go6t/iDtwOgAxcsmt/KKS17WJ9yGHVugRpVrFYmTuJPxvVq+dgFcgmOfjHiGT70EO4Pd0QM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1706714064; c=relaxed/simple; bh=/qhuO5HuYtAvq48p1CcziTjf7g4yt0baC+LPUKnS3Yw=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=fWgWSsxaKR8uZE206x2YfCtqGHSoeMkv8F1dGe9bqI9lWtkonxm8p6wuI71y/pOylmZ/2MuewHBDN/c4IlNA9B6fWXpb2hwl3k0dc/JLH4zlW6xXT9o7Pg5ihE7V+UM0T0E8zKGkMXAjP9I9qaLeP4D/5Aw7XUzcgP0cnua9fZ0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=arm.com; spf=pass smtp.mailfrom=arm.com; arc=none smtp.client-ip=217.140.110.172 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=arm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=arm.com Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 8FD83DA7; Wed, 31 Jan 2024 07:15:04 -0800 (PST) Received: from [10.1.196.40] (e121345-lin.cambridge.arm.com [10.1.196.40]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 4E5703F762; Wed, 31 Jan 2024 07:14:20 -0800 (PST) Message-ID: Date: Wed, 31 Jan 2024 15:14:18 +0000 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 2/3] swiotlb: Enforce page alignment in swiotlb_alloc() Content-Language: en-GB To: Will Deacon , linux-kernel@vger.kernel.org Cc: kernel-team@android.com, iommu@lists.linux.dev, Christoph Hellwig , Marek Szyprowski , Petr Tesarik , Dexuan Cui References: <20240131122543.14791-1-will@kernel.org> <20240131122543.14791-3-will@kernel.org> From: Robin Murphy In-Reply-To: <20240131122543.14791-3-will@kernel.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 31/01/2024 12:25 pm, Will Deacon wrote: > When allocating pages from a restricted DMA pool in swiotlb_alloc(), > the buffer address is blindly converted to a 'struct page *' that is > returned to the caller. In the unlikely event of an allocation bug, > page-unaligned addresses are not detected and slots can silently be > double-allocated. > > Add a simple check of the buffer alignment in swiotlb_alloc() to make > debugging a little easier if something has gone wonky. > > Cc: Christoph Hellwig > Cc: Marek Szyprowski > Cc: Robin Murphy > Cc: Petr Tesarik > Cc: Dexuan Cui > Signed-off-by: Will Deacon > --- > kernel/dma/swiotlb.c | 6 ++++++ > 1 file changed, 6 insertions(+) > > diff --git a/kernel/dma/swiotlb.c b/kernel/dma/swiotlb.c > index 56cc08b1fbd6..4485f216e620 100644 > --- a/kernel/dma/swiotlb.c > +++ b/kernel/dma/swiotlb.c > @@ -1642,6 +1642,12 @@ struct page *swiotlb_alloc(struct device *dev, size_t size) > return NULL; > > tlb_addr = slot_addr(pool->start, index); > + if (unlikely(!PAGE_ALIGNED(tlb_addr))) { > + dev_WARN_ONCE(dev, 1, "Cannot allocate pages from non page-aligned swiotlb addr 0x%pa.\n", > + &tlb_addr); Nit: if there's cause for another respin, I'd be inclined to use a straightforward "if (WARN_ON(...))" here - this condition should represent SWIOTLB itself going badly wrong, which isn't really attributable to whatever device happened to be involved in the call. Cheers, Robin. > + swiotlb_release_slots(dev, tlb_addr); > + return NULL; > + } > > return pfn_to_page(PFN_DOWN(tlb_addr)); > }