linux-kernel - Re: [PATCH v1] PCI: imx6: Handle the abort from user-space

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20220210080050.GA7275@francesco-nb.int.toradex.com>
Date:   Thu, 10 Feb 2022 09:00:50 +0100
From:   Francesco Dolcini <francesco.dolcini@...adex.com>
To:     Lorenzo Pieralisi <lorenzo.pieralisi@....com>
Cc:     Richard Zhu <hongxing.zhu@....com>,
        Lucas Stach <l.stach@...gutronix.de>,
        Rob Herring <robh@...nel.org>,
        Krzysztof Wilczyński <kw@...ux.com>,
        Sascha Hauer <s.hauer@...gutronix.de>,
        Pengutronix Kernel Team <kernel@...gutronix.de>,
        Fabio Estevam <festevam@...il.com>,
        NXP Linux Team <linux-imx@....com>,
        Jason Liu <jason.hui.liu@....com>, linux-pci@...r.kernel.org,
        linux-arm-kernel@...ts.infradead.org, linux-kernel@...r.kernel.org,
        Bjorn Helgaas <bhelgaas@...gle.com>,
        Shawn Guo <shawnguo@...nel.org>,
        Francesco Dolcini <francesco.dolcini@...adex.com>
Subject: Re: [PATCH v1] PCI: imx6: Handle the abort from user-space

Hello Lorenzo,
just a gently ping on this patch.

Francesco

On Mon, Jan 31, 2022 at 08:52:35AM +0100, Francesco Dolcini wrote:
> From: Jason Liu <jason.hui.liu@....com>
> 
> The driver install one hook to handle the external abort, but issue
> is that if the abort introduced from user space code, the following
> code unsigned long instr = *(unsigned long *)pc; which will created
> another data-abort(page domain fault) if CONFIG_CPU_SW_DOMAIN_PAN.
> 
> The patch does not intent to use copy_from_user and then do the hack
> due to the security consideration. In fact, we can just return and
> report the external abort to user-space.
> 
> Link: https://lore.kernel.org/all/20220128082920.591115-1-francesco.dolcini@toradex.com
> Signed-off-by: Jason Liu <jason.hui.liu@....com>
> Reviewed-by: Richard Zhu <hongxing.zhu@....com>
> Signed-off-by: Francesco Dolcini <francesco.dolcini@...adex.com>
> Acked-by: Lucas Stach <l.stach@...gutronix.de>