linux-kernel - [BUG] XHCI getting ZONE_DMA32 memory > than its bus_dma

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <34619bdf-6527-ae82-7e4d-e2ea7c67ed56@arm.com>
Date:   Thu, 2 Jul 2020 12:49:14 -0500
From:   Jeremy Linton <jeremy.linton@....com>
To:     "linux-arm-kernel@...ts.infradead.org" 
        <linux-arm-kernel@...ts.infradead.org>, linux-mm@...ck.org,
        "linux-usb@...r.kernel.org" <linux-usb@...r.kernel.org>,
        rientjes@...gle.com, Christoph Hellwig <hch@....de>,
        Nicolas Saenz Julienne <nsaenzjulienne@...e.de>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: [BUG] XHCI getting ZONE_DMA32 memory > than its bus_dma_limit

Hi,

Using 5.8rc3:

The rpi4 has a 3G dev->bus_dma_limit on its XHCI controller. With a usb3 
hub, plus a few devices plugged in, randomly devices will fail 
operations. This appears to because xhci_alloc_container_ctx() is 
getting buffers > 3G via dma_pool_zalloc().

Tracking that down, it seems to be caused by dma_alloc_from_pool() using 
dev_to_pool()->dma_direct_optimal_gfp_mask() to "optimistically" select 
the atomic_pool_dma32 but then failing to verify that the allocations in 
the pool are less than the dev bus_dma_limit.

Thanks,