[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [xen master] xen/iommu: vtd: Fix undefined behavior pci_vtd_quirks()
commit aec46884784c2494a30221da775d4ac2c43a4d42 Author: Julien Grall <jgrall@xxxxxxxxxx> AuthorDate: Tue Nov 17 13:45:47 2020 +0000 Commit: Julien Grall <jgrall@xxxxxxxxxx> CommitDate: Wed Dec 2 18:02:11 2020 +0000 xen/iommu: vtd: Fix undefined behavior pci_vtd_quirks() When booting Xen with CONFIG_USBAN=y on Sandy Bridge, UBSAN will throw the following splat: (XEN) ================================================================================ (XEN) UBSAN: Undefined behaviour in quirks.c:449:63 (XEN) left shift of 1 by 31 places cannot be represented in type 'int' (XEN) ----[ Xen-4.11.4 x86_64 debug=y Not tainted ]---- [...] (XEN) Xen call trace: (XEN) [<ffff82d0802c0ccc>] ubsan.c#ubsan_epilogue+0xa/0xad (XEN) [<ffff82d0802c16c9>] __ubsan_handle_shift_out_of_bounds+0xb4/0x145 (XEN) [<ffff82d0802eeecd>] pci_vtd_quirk+0x3d3/0x74f (XEN) [<ffff82d0802e508b>] iommu.c#domain_context_mapping+0x45b/0x46f (XEN) [<ffff82d08053f39e>] iommu.c#setup_hwdom_device+0x22/0x3a (XEN) [<ffff82d08053dfbc>] pci.c#setup_one_hwdom_device+0x8c/0x124 (XEN) [<ffff82d08053e302>] pci.c#_setup_hwdom_pci_devices+0xbb/0x2f7 (XEN) [<ffff82d0802da5b7>] pci.c#pci_segments_iterate+0x4c/0x8c (XEN) [<ffff82d08053e8bd>] setup_hwdom_pci_devices+0x25/0x2c (XEN) [<ffff82d08053e916>] iommu.c#intel_iommu_hwdom_init+0x52/0x2f3 (XEN) [<ffff82d08053d6da>] iommu_hwdom_init+0x4e/0xa4 (XEN) [<ffff82d080577f32>] dom0_construct_pv+0x23c8/0x2476 (XEN) [<ffff82d08057cb50>] construct_dom0+0x6c/0xa3 (XEN) [<ffff82d080564822>] __start_xen+0x4651/0x4b55 (XEN) [<ffff82d0802000f3>] __high_start+0x53/0x55 Note that splat is from 4.11.4 and not staging. Although, the problem is still present. This can be solved by making the first operand unsigned int. Signed-off-by: Julien Grall <jgrall@xxxxxxxxxx> Acked-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx> Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx> Reviewed-by: Kevin Tian <kevin.tian@xxxxxxxxx> --- xen/drivers/passthrough/vtd/quirks.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xen/drivers/passthrough/vtd/quirks.c b/xen/drivers/passthrough/vtd/quirks.c index a8330f17bc..8a81d9c930 100644 --- a/xen/drivers/passthrough/vtd/quirks.c +++ b/xen/drivers/passthrough/vtd/quirks.c @@ -435,7 +435,7 @@ void pci_vtd_quirk(const struct pci_dev *pdev) case 0x3728: /* Xeon C5500/C3500 (JasperForest) */ case 0x3c28: /* Sandybridge */ val = pci_conf_read32(pdev->sbdf, 0x1AC); - pci_conf_write32(pdev->sbdf, 0x1AC, val | (1 << 31)); + pci_conf_write32(pdev->sbdf, 0x1AC, val | (1U << 31)); printk(XENLOG_INFO "Masked VT-d error signaling on %pp\n", &pdev->sbdf); break; -- generated by git-patchbot for /home/xen/git/xen.git#master
|
Lists.xenproject.org is hosted with RackSpace, monitoring our |