[Xen-changelog] [xen staging] xen/arm: domain_build: harden make_cpus_node()

[patchbot@xxxxxxx]

commit fef8d99fbce1a5e7ddfd22b0f33940b8d6193ec8
Author:     Stefano Stabellini <sstabellini@xxxxxxxxxx>
AuthorDate: Wed Oct 9 17:42:11 2019 -0700
Commit:     Stefano Stabellini <sstabellini@xxxxxxxxxx>
CommitDate: Thu Oct 10 11:17:08 2019 -0700

    xen/arm: domain_build: harden make_cpus_node()
    
    make_cpus_node() is using a static buffer to generate the FDT node name.
    While mpdir_aff is a 64-bit integer, we only ever use the bits [23:0] as
    only AFF{0, 1, 2} are supported for now.
    
    To avoid any potential issues in the future, check that mpdir_aff has
    only bits [23:0] set.
    
    Take the opportunity to reduce the size of the buffer. Indeed, only 8
    characters are needed to print a 32-bit hexadecimal number. So
    sizeof("cpu@") + 8 + 1 (for '\0') = 13 characters is sufficient.
    
    Fixes: c81a791d34 (xen/arm: Set 'reg' of cpu node for dom0 to match MPIDR's 
affinity)
    Signed-off-by: Stefano Stabellini <stefano.stabellini@xxxxxxxxxx>
    Reviewed-by: Julien Grall <julien.grall@xxxxxxx>
    Release-acked-by: Juergen Gross <jgross@xxxxxxxx>
---
 xen/arch/arm/domain_build.c | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/xen/arch/arm/domain_build.c b/xen/arch/arm/domain_build.c
index e7eaa35b14..11382a605b 100644
--- a/xen/arch/arm/domain_build.c
+++ b/xen/arch/arm/domain_build.c
@@ -793,8 +793,8 @@ static int __init make_cpus_node(const struct domain *d, 
void *fdt)
     unsigned int cpu;
     const void *compatible = NULL;
     u32 len;
-    /* Placeholder for cpu@ + a 32-bit number + \0 */
-    char buf[15];
+    /* Placeholder for cpu@ + a 32-bit hexadecimal number + \0 */
+    char buf[13];
     u32 clock_frequency;
     bool clock_valid;
     uint64_t mpidr_aff;
@@ -852,11 +852,26 @@ static int __init make_cpus_node(const struct domain *d, 
void *fdt)
          * the MPIDR's affinity bits. We will use AFF0 and AFF1 when
          * constructing the reg value of the guest at the moment, for it
          * is enough for the current max vcpu number.
+         *
+         * We only deal with AFF{0, 1, 2} stored in bits [23:0] at the
+         * moment.
          */
         mpidr_aff = vcpuid_to_vaffinity(cpu);
+        if ( (mpidr_aff & ~GENMASK_ULL(23, 0)) != 0 )
+        {
+            printk(XENLOG_ERR "Unable to handle MPIDR AFFINITY 0x%"PRIx64"\n",
+                   mpidr_aff);
+            return -EINVAL;
+        }
+
         dt_dprintk("Create cpu@%"PRIx64" (logical CPUID: %d) node\n",
                    mpidr_aff, cpu);
 
+        /*
+         * We use PRIx64 because mpidr_aff is a 64bit integer. However,
+         * only bits [23:0] are used, thus, we are sure it will fit in
+         * buf.
+         */
         snprintf(buf, sizeof(buf), "cpu@%"PRIx64, mpidr_aff);
         res = fdt_begin_node(fdt, buf);
         if ( res )
--
generated by git-patchbot for /home/xen/git/xen.git#staging

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/xen-changelog