Vijayanand Jitta
66731738f2
iommu: Fix invalid access in av8l_fast_unmap_public ...
KASAN has reported the following invalid access in av8l_fast_unmap_public.
This is because while calculating pmd offset, base is subtracted from
iova, in case if iova is less than base it would result in underflow,
thereby resulting in an invalid access.
BUG: KASAN: wild-memory-access in av8l_fast_unmap_public+0x60/0x88 [qcom_iommu_util]
Write of size 8 at addr 007fffc084480000 by task syz.1.693/6987
Call trace:
dump_backtrace+0x1b0/0x1e0
show_stack+0x2c/0x40
dump_stack_lvl+0xd0/0x128
print_report+0xe4/0x6f8
kasan_report+0xe8/0x148
kasan_check_range+0x250/0x294
__asan_memset+0x34/0x68
av8l_fast_unmap_public+0x60/0x88
fast_smmu_unmap_page+0x1cc/0x244
dma_unmap_page_attrs+0xa4/0x3a0
geni_i2c_xfer+0x4a24/0x6154
__i2c_transfer+0x488/0x147c
i2c_transfer+0x174/0x21c
i2cdev_ioctl_rdwr+0x22c/0x44c
i2cdev_ioctl+0x628/0x700
__arm64_sys_ioctl+0x110/0x18c
invoke_syscall+0x88/0x1cc
el0_svc_common+0xe4/0x1b0
Fix this by adding a check and returning error when iova
is less than base.
Fixes: Ie6c23cb8e17 ("iommu/io-pgtable-fast: optimize statically allocated pages")
Change-Id: I4e3a585d348d897e51888a898c8e64c51c9f46c3
Signed-off-by: Vijayanand Jitta <quic_vjitta@quicinc.com>
Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>
2025-04-17 19:01:13 +05:30
This is the 5.4.228 stable release
2023-01-07 14:58:34 +00:00
firmware: meson_sm: Rework driver as a proper platform driver
2024-04-13 12:51:26 +02:00
Merge android11-5.4.249+ ( d57e792) into msm-5.4
2023-09-28 16:45:28 +05:30
net: xgene: Move shared header file into include/linux
2023-02-06 07:52:47 +01:00
RDMA/mlx5: Enforce same type port association for multiport RoCE
2025-01-09 13:23:34 +01:00
mmc: sdhci-msm: Disable partial_init and clk-scaling to avoid RED error
2024-04-18 10:46:06 +05:30
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
Revert "netfilter: Replace zero-length array with flexible-array member"
2025-01-14 17:17:17 +00:00
Revert "netfilter: Replace zero-length array with flexible-array member"
2025-01-14 17:17:17 +00:00
Revert "netfilter: Replace zero-length array with flexible-array member"
2025-01-14 17:17:17 +00:00
Revert "netfilter: Replace zero-length array with flexible-array member"
2025-01-14 17:17:17 +00:00
Revert "netfilter: Replace zero-length array with flexible-array member"
2025-01-14 17:17:17 +00:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
This is the 5.4.244 stable release
2023-06-20 11:07:18 +00:00
qed: Improve the stack space of filter_config()
2024-08-19 05:33:30 +02:00
Merge android11-5.4.259+ ( 81334f2) into msm-5.4
2023-12-18 15:40:18 +05:30
Merge android11-5.4.265+ ( a34cc1d) into msm-5.4
2024-02-29 15:10:56 +05:30
Revert "spi: Fix deadlock when adding SPI controllers on SPI buses"
2024-11-21 22:00:36 +00:00
SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE
2024-12-14 19:44:42 +01:00
Revert "usb: typec: bus: verify partner exists in typec_altmode_attention"
2023-09-30 15:45:05 +00:00
ACPI/IORT: Make iort_msi_map_rid() PCI agnostic
2023-12-13 18:18:10 +01:00
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
2024-09-04 13:14:50 +02:00
ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use
2023-06-09 10:28:54 +02:00
Merge 5.4.287 into android11-5.4-lts
2024-12-16 10:50:16 +00:00
Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()"
2024-03-05 10:21:38 +00:00
Revert "cgroup: Make operations on the cgroup root_list RCU safe"
2024-12-16 10:50:29 +00:00
Merge android11-5.4.233+ ( 4716ccc) into msm-5.4
2023-05-30 11:16:10 +05:30
Merge android11-5.4.259+ ( 81334f2) into msm-5.4
2023-12-18 15:40:18 +05:30
ftruncate: pass a signed offset
2024-07-05 09:08:31 +02:00
Fix gcc 4.9 build issue in 5.4.y
2024-08-19 05:33:53 +02:00
Merge android11-5.4.254+ ( 91f7025) into msm-5.4
2023-10-30 22:46:41 -07:00
Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier"
2023-12-18 18:58:40 +00:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
Revert "cred: switch to using atomic_long_t"
2024-01-03 17:00:08 +00:00
debugfs: regset32: Add Runtime PM support
2023-05-17 11:35:32 +02:00
Revert "PM/devfreq: governor: Add a private governor_data for governor"
2023-01-19 09:15:34 +00:00
This is the 5.4.283 stable release
2024-09-06 11:18:13 +00:00
Merge android11-5.4.259+ ( 81334f2) into msm-5.4
2023-12-18 15:40:18 +05:30
linux/dim: Do nothing if no time delta between samples
2023-05-30 12:44:01 +01:00
Merge android11-5.4.233+ ( 4716ccc) into msm-5.4
2023-05-30 11:16:10 +05:30
Merge android11-5.4.242+(e699d54) into msm-5.4
2023-07-26 14:21:25 +05:30
dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
2024-02-23 08:25:06 +01:00
misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
2024-12-14 19:44:55 +01:00
efi: random: reduce seed size to 32 bytes
2022-11-10 17:57:55 +01:00
ethernet: Add helper for assigning packet type when dest address does not match device address
2024-05-02 16:18:36 +02:00
eventfd: Export eventfd_ctx_do_read()
2023-09-23 10:59:40 +02:00
Merge 5.4.273 into android11-5.4-lts
2024-04-16 15:17:08 +00:00
objtool: Add support for intra-function calls
2024-04-13 12:51:29 +02:00
This is the 5.4.285 stable release
2024-11-09 11:29:17 +00:00
This is the 5.4.280 stable release
2024-07-19 13:19:29 +00:00
ftrace: Mark get_lock_parent_ip() __always_inline
2023-04-20 12:07:34 +02:00
Merge android11-5.4.274 ( 564901b) into msm-5.4
2024-07-24 20:38:43 -07:00
Revert "HID: core: store the unique system identifier in hid_device"
2023-12-11 12:08:38 +00:00
Merge android11-5.4.233+ ( 4716ccc) into msm-5.4
2023-05-30 11:16:10 +05:30
gpu: host1x: mipi: Update tegra_mipi_request() to be node based
2024-03-26 18:22:18 -04:00
Revert "hrtimer: Report offline hrtimer enqueue"
2024-03-05 10:19:34 +00:00
hugetlb: check for undefined shift on 32 bit architectures
2023-02-22 12:50:39 +01:00
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
2025-01-09 13:23:33 +01:00
i2c: Use IS_REACHABLE() for substituting empty ACPI functions
2024-09-12 11:03:50 +02:00
Fix termination state for idr_for_each_entry_ul()
2023-11-20 10:30:15 +01:00
net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
2023-09-23 10:59:55 +02:00
team: fix null-ptr-deref when team device type is changed
2023-10-10 21:46:37 +02:00
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
2025-01-09 13:23:35 +01:00
ima: Align ima_file_mmap() parameters with mmap_file LSM hook
2023-03-11 16:44:02 +01:00
Revert "interconnect: Add helpers for enabling/disabling a path"
2023-08-31 13:52:19 +00:00
Merge android11-5.4.249+ ( d57e792) into msm-5.4
2023-09-28 16:45:28 +05:30
iommu: Fix invalid access in av8l_fast_unmap_public
2025-04-17 19:01:13 +05:30
Merge android11-5.4.281 ( d62984a) into msm-5.4
2024-10-29 01:43:17 -07:00
Merge 5.4.259 into android11-5.4-lts
2023-10-26 09:18:00 +00:00
Merge android11-5.4.226+ ( d72fdcc) into msm-5.4
2023-02-07 13:23:49 +05:30
msm: ipa: Add support for Private IP Forwarding
2024-01-31 15:08:32 +05:30
ipa_eth: Header change to pass more info from ETH to GSI
2023-06-14 09:27:04 +05:30
msm: ipa: Add disable_msi flag
2023-02-02 13:06:03 -08:00
msm: ipa: Rmnet CV2X header file changes
2023-01-21 20:30:16 -08:00
msm: ipa3: change variable name for indication of
2024-03-13 08:33:14 -07:00
Revert "genirq: Allow irq_chip registration functions to take a const irq_chip"
2024-08-30 10:05:12 +00:00
Revert "genirq: Allow the PM device to originate from irq domain"
2024-08-30 10:05:12 +00:00
jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers()
2024-11-08 16:20:30 +01:00
Merge 5.4.287 into android11-5.4-lts
2024-12-16 10:50:16 +00:00
This is the 5.4.231 stable release
2023-02-06 10:47:39 +00:00
genirq: Fix the return type of kstat_cpu_irqs_sum()
2023-03-11 16:43:38 +01:00
x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
2023-03-11 16:44:02 +01:00
UPSTREAM: leds: flash: Fix multicolor no-ops registration by return 0
2022-12-21 16:28:02 +00:00
leds: class: Protect brightness_show() with led_cdev->led_access mutex
2024-12-14 19:44:53 +01:00
ata: libata-sata: increase PMP SRST timeout to 10s
2023-10-10 21:46:42 +02:00
list: add "list_del_init_careful()" to go with "list_empty_careful()"
2023-06-28 10:18:35 +02:00
drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
2024-03-01 13:13:38 +01:00
This is the 5.4.269 stable release
2024-02-24 15:47:08 +00:00
ext4: fix deadlock due to mbcache entry corruption
2023-01-18 11:41:56 +01:00
mcb: remove is_added flag from mcb_device struct
2023-10-25 11:53:19 +02:00
net: phy: mchp: Add support for LAN8814 QUAD PHY
2024-07-05 09:08:27 +02:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
mm: Fix '.data.once' orphan section warning
2022-12-08 11:23:04 +01:00
Merge android11-5.4.219+ ( 0ce03d1) into msm-5.4
2023-01-27 00:57:29 +05:30
params: lift param_set_uint_minmax to common code
2024-06-16 13:28:45 +02:00
msm: ep_pcie: Disable hot reset and ignore linkdown
2024-09-13 17:38:37 +05:30
new helper: lookup_positive_unlocked()
2023-09-23 10:59:40 +02:00
Merge android11-5.4.259+ ( 81334f2) into msm-5.4
2023-12-18 15:40:18 +05:30
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
netpoll: Use rcu_access_pointer() in netpoll_poll_lock
2024-12-14 19:44:28 +01:00
Revert "fs/nls: make load_nls() take a const parameter"
2023-09-30 15:41:35 +00:00
Merge android11-5.4.254+ ( 91f7025) into msm-5.4
2023-10-30 22:46:41 -07:00
uaccess: Add speculation barrier to copy_from_user()
2023-02-25 11:53:26 +01:00
nvme-tcp: fix nvme_tcp_term_pdu to match spec
2023-04-05 11:16:38 +02:00
nvme: fixup comment for nvme RDMA Provider Type
2024-07-05 09:08:28 +02:00
mlxsw: spectrum_acl_erp: Fix object nesting warning
2024-08-19 05:33:28 +02:00
Merge android11-5.4.265+ ( a34cc1d) into msm-5.4
2024-02-29 15:10:56 +05:30
of/irq: Make of_msi_map_rid() PCI bus agnostic
2023-12-13 18:18:11 +01:00
overflow: Implement size_t saturating arithmetic helpers
2024-09-04 13:14:51 +02:00
Merge android11-5.4.281 ( d62984a) into msm-5.4
2024-10-29 01:43:17 -07:00
This is the 5.4.285 stable release
2024-11-09 11:29:17 +00:00
Merge android11-5.4.265+ ( a34cc1d) into msm-5.4
2024-02-29 15:10:56 +05:30
ANDROID: 16K: Introduce pgsize_migration_inline.h
2024-10-10 16:13:30 -07:00
ANDROID: 16K: Introduce pgsize_migration_inline.h
2024-10-10 16:13:30 -07:00
ANDROID: fix up platform_device ABI break
2023-11-28 10:15:58 +00:00
Revert "PM: domains: Fix up terminology with parent/child"
2023-06-16 09:26:26 +00:00
This is the 5.4.269 stable release
2024-02-24 15:47:08 +00:00
PM / wakeirq: support enabling wake-up irq after runtime_suspend called
2023-08-11 11:54:00 +02:00
fs/select: rework stack allocation hack for clang
2024-03-26 18:22:13 -04:00
Merge 5.4.245 into android11-5.4-lts
2023-06-20 16:54:26 +00:00
sched/rt: Provide migrate_disable/enable() inlines
2023-11-20 10:30:12 +01:00
Merge android11-5.4.249+ ( d57e792) into msm-5.4
2023-09-28 16:45:28 +05:30
net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
2023-01-18 11:41:02 +01:00
This is the 5.4.262 stable release
2023-11-29 10:18:14 +00:00
firmware: qcom_scm: Add a call for getting dload mode
2024-06-21 10:36:14 +05:30
Merge 5.4.259 into android11-5.4-lts
2023-10-26 09:18:00 +00:00
quota: Fix slow quotaoff
2023-10-25 11:53:18 +02:00
scsi: core: raid_class: Remove raid_component_add()
2023-08-30 16:27:27 +02:00
Merge 5.4.233 into android11-5.4-lts
2023-02-27 11:20:30 +00:00
rcu: add a helper to report consolidated flavor QS
2024-03-26 18:22:25 -04:00
Revert "regmap: allow to define reg_update_bits for no bus configuration"
2024-04-16 10:04:00 +00:00
This is the 5.4.284 stable release
2024-09-12 10:37:37 +00:00
Merge android11-5.4.242+(e699d54) into msm-5.4
2023-07-26 14:21:25 +05:30
Merge android11-5.4.259+ ( 81334f2) into msm-5.4
2023-12-18 15:40:18 +05:30
scatterlist: add generic wrappers for iterating over sgtable objects
2023-02-25 11:53:25 +01:00
This is the 5.4.269 stable release
2024-02-24 15:47:08 +00:00
Revert "Revert "8250: add support for ASIX devices with a FIFO bug""
2023-08-03 13:52:27 +00:00
serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
2024-05-02 16:18:37 +02:00
sh: intc: Avoid spurious sizeof-pointer-div warning
2023-03-22 13:28:08 +01:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
Merge android11-5.4.233+ ( 4716ccc) into msm-5.4
2023-05-30 11:16:10 +05:30
lib/string_helpers: Introduce string_upper() and string_lower() helpers
2023-05-30 12:44:08 +01:00
Merge android11-5.4.281 ( d62984a) into msm-5.4
2024-10-29 01:43:17 -07:00
Merge android11-5.4.233+ ( 4716ccc) into msm-5.4
2023-05-30 11:16:10 +05:30
ANDROID: preserve CRC for struct tcp_sock
2024-07-20 12:53:22 +00:00
tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
2023-05-17 11:35:57 +02:00
Merge android11-5.4.274 ( 564901b) into msm-5.4
2024-07-24 20:38:43 -07:00
timerqueue: Use rb_entry_safe() in timerqueue_getnext()
2023-01-18 11:40:53 +01:00
efi: tpm: Avoid READ_ONCE() for accessing the event log
2023-01-18 11:42:00 +01:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
tracing: Make tracepoint lockdep check actually test something
2023-03-22 13:28:08 +01:00
tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
2023-05-17 11:36:04 +02:00
u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
2024-05-02 16:18:28 +02:00
uaccess: Add minimum bounds check on kernel buffer size
2023-03-11 16:43:56 +01:00
units: add the HZ macros
2024-02-23 08:24:47 +01:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
util_macros.h: fix/rework find_closest() macros
2024-12-14 19:44:43 +01:00
vfio: Introduce interface to flush virqfd inject workqueue
2024-04-13 12:51:34 +02:00
net: do not allow gso_size to be set to GSO_BY_FRAGS
2023-08-30 16:27:17 +02:00
linux/vt_buffer.h: allow either builtin or modular for macros
2023-05-17 11:35:46 +02:00
Merge android11-5.4.289(4c8fb32) into msm-5.4
2025-03-26 11:56:22 +05:30
This is the 5.4.251 stable release
2023-08-03 10:56:28 +00:00
