Kamal Heib 429fa96989 RDMA/siw: Fix calculation of tx_valid_cpus size ... The size of tx_valid_cpus was calculated under the assumption that the numa nodes identifiers are continuous, which is not the case in all archs as this could lead to the following panic when trying to access an invalid tx_valid_cpus index, avoid the following panic by using nr_node_ids instead of num_online_nodes() to allocate the tx_valid_cpus size. Kernel attempted to read user page (8) - exploit attempt? (uid: 0) BUG: Kernel NULL pointer dereference on read at 0x00000008 Faulting instruction address: 0xc0080000081b4a90 Oops: Kernel access of bad area, sig: 11 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA PowerNV Modules linked in: siw(+) rfkill rpcrdma ib_isert iscsi_target_mod ib_iser libiscsi scsi_transport_iscsi ib_srpt target_core_mod ib_srp scsi_transport_srp ib_ipoib rdma_ucm sunrpc ib_umad rdma_cm ib_cm iw_cm i40iw ib_uverbs ib_core i40e ses enclosure scsi_transport_sas ipmi_powernv ibmpowernv at24 ofpart ipmi_devintf regmap_i2c ipmi_msghandler powernv_flash uio_pdrv_genirq uio mtd opal_prd zram ip_tables xfs libcrc32c sd_mod t10_pi ast i2c_algo_bit drm_vram_helper drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops cec drm_ttm_helper ttm drm vmx_crypto aacraid drm_panel_orientation_quirks dm_mod CPU: 40 PID: 3279 Comm: modprobe Tainted: G W X --------- --- 5.11.0-0.rc4.129.eln108.ppc64le #2 NIP: c0080000081b4a90 LR: c0080000081b4a2c CTR: c0000000007ce1c0 REGS: c000000027fa77b0 TRAP: 0300 Tainted: G W X --------- --- (5.11.0-0.rc4.129.eln108.ppc64le) MSR: 9000000002009033 <SF,HV,VEC,EE,ME,IR,DR,RI,LE> CR: 44224882 XER: 00000000 CFAR: c0000000007ce200 DAR: 0000000000000008 DSISR: 40000000 IRQMASK: 0 GPR00: c0080000081b4a2c c000000027fa7a50 c0080000081c3900 0000000000000040 GPR04: c000000002023080 c000000012e1c300 000020072ad70000 0000000000000001 GPR08: c000000001726068 0000000000000008 0000000000000008 c0080000081b5758 GPR12: c0000000007ce1c0 c0000007fffc3000 00000001590b1e40 0000000000000000 GPR16: 0000000000000000 0000000000000001 000000011ad68fc8 00007fffcc09c5c8 GPR20: 0000000000000008 0000000000000000 00000001590b2850 00000001590b1d30 GPR24: 0000000000043d68 000000011ad67a80 000000011ad67a80 0000000000100000 GPR28: c000000012e1c300 c0000000020271c8 0000000000000001 c0080000081bf608 NIP [c0080000081b4a90] siw_init_cpulist+0x194/0x214 [siw] LR [c0080000081b4a2c] siw_init_cpulist+0x130/0x214 [siw] Call Trace: [c000000027fa7a50] [c0080000081b4a2c] siw_init_cpulist+0x130/0x214 [siw] (unreliable) [c000000027fa7a90] [c0080000081b4e68] siw_init_module+0x40/0x2a0 [siw] [c000000027fa7b30] [c0000000000124f4] do_one_initcall+0x84/0x2e0 [c000000027fa7c00] [c000000000267ffc] do_init_module+0x7c/0x350 [c000000027fa7c90] [c00000000026a180] __do_sys_init_module+0x210/0x250 [c000000027fa7db0] [c0000000000387e4] system_call_exception+0x134/0x230 [c000000027fa7e10] [c00000000000d660] system_call_common+0xf0/0x27c Instruction dump: 40810044 3d420000 e8bf0000 e88a82d0 3d420000 e90a82c8 792a1f24 7cc4302a 7d2642aa 79291f24 7d25482a 7d295214 <7d4048a8> 7d4a3b78 7d4049ad 40c2fff4 Fixes: bdcf26bf9b ("rdma/siw: network and RDMA core interface") Link: https://lore.kernel.org/r/20210201112922.141085-1-kamalheib1@gmail.com Signed-off-by: Kamal Heib <kamalheib1@gmail.com> Reviewed-by: Bernard Metzler <bmt@zurich.ibm.com> Tested-by: Yi Zhang <yi.zhang@redhat.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>		2021-02-08 20:04:57 -04:00
..
accessibility	speakup: fix uninitialized flush_lock	2020-12-09 15:38:13 +01:00
acpi	ACPI: scan: Harden acpi_device_add() against device ID overflows	2021-01-11 20:45:31 +01:00
amba
android	Merge branch 'exec-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2020-12-15 19:29:43 -08:00
ata
atm	atm: idt77252: call pci_disable_device() on error path	2020-12-21 17:34:09 -08:00
auxdisplay
base	Device properties framework fixes for 5.11-rc3	2021-01-08 15:45:47 -08:00
bcma
block	block/rnbd-clt: avoid module unload race with close confirmation	2021-01-08 08:19:18 -07:00
bluetooth	Bluetooth: btusb: Add workaround for remote-wakeup issues with Barrot 8041a02 fake CSR controllers	2020-12-07 17:01:54 +02:00
bus	ARM: SoC drivers for v5.11	2020-12-16 16:38:41 -08:00
cdrom	cdrom: Reset sector_size back it is not 2048.	2020-12-12 11:12:25 -07:00
char	UAPI Changes:	2020-12-18 12:38:28 -08:00
clk	clk: tegra30: Add hda clock default rates to clock driver	2021-01-12 14:43:53 +01:00
clocksource	asm-generic: cross-architecture timer cleanup	2020-12-16 00:07:17 -08:00
connector	net/connector: Add const qualifier to cb_id	2020-12-16 11:06:49 -08:00
counter	counter: microchip-tcb-capture: Fix CMR value check	2020-12-03 19:40:31 +00:00
cpufreq	cpufreq: intel_pstate: remove obsolete functions	2021-01-07 18:22:46 +01:00
cpuidle	ARM: SoC drivers for v5.11	2020-12-16 16:38:41 -08:00
crypto	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2020-12-27 09:14:32 -08:00
dax	libnvdimm for 5.11	2020-12-24 12:18:11 -08:00
dca
devfreq	Merge branches 'pm-devfreq' and 'pm-tools'	2020-12-15 15:27:16 +01:00
dio
dma	dmaengine: stm32-mdma: fix STM32_MDMA_VERY_HIGH_PRIORITY value	2021-01-04 21:27:45 +05:30
dma-buf	dma-buf: cma_heap: Fix memory leak in CMA heap	2021-01-10 23:08:21 +05:30
edac	Merge branch 'akpm' (patches from Andrew)	2020-12-15 12:53:37 -08:00
eisa
extcon	extcon: max77693: Fix modalias string	2020-12-11 17:18:10 +09:00
firewire
firmware	EFI updates collected by Ard Biesheuvel:	2020-12-24 12:40:07 -08:00
fpga	Merge 5.10-rc7 into char-misc-next	2020-12-07 10:08:14 +01:00
fsi	hwmon patches for v5.11	2020-12-15 16:06:14 -08:00
gnss
gpio	This is the bulk of the GPIO changes for the v5.11 kernel cycle:	2020-12-17 18:07:20 -08:00
gpu	Merge branch '04.01-ampere-lite' of git://github.com/skeggsb/linux into topic/nouveau-ampere-modeset	2021-01-15 14:48:18 +10:00
greybus
hid	HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth mode	2021-01-14 13:27:35 +01:00
hsi	HSI: core: fix a kernel-doc markup	2020-12-02 22:35:44 +01:00
hv	x86/hyperv: Fix kexec panic/hang issues	2021-01-05 17:52:04 +00:00
hwmon	hwmon: (amd_energy) fix allocation of hwmon_channel_info config	2021-01-08 07:31:03 -08:00
hwspinlock	hwspinlock: sirf: Remove the redundant 'of_match_ptr'	2020-12-10 13:34:40 -06:00
hwtracing	Char / Misc driver updates for 5.11-rc1	2020-12-15 14:10:09 -08:00
i2c	i2c: mediatek: Fix apdma and i2c hand-shake timeout	2021-01-05 10:54:37 +01:00
i3c	i3c/master/mipi-i3c-hci: quiet maybe-unused variable warning	2020-12-17 10:31:30 +01:00
ide	SCSI fixes on 20210101	2021-01-01 12:58:07 -08:00
idle	intel_idle: add SnowRidge C-state table	2020-12-30 18:25:34 +01:00
iio	Staging / IIO driver patches for 5.11-rc1	2020-12-15 14:18:40 -08:00
infiniband	RDMA/siw: Fix calculation of tx_valid_cpus size	2021-02-08 20:04:57 -04:00
input	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2020-12-15 16:18:23 -08:00
interconnect	interconnect: imx8mq: Use icc_sync_state	2020-12-28 14:03:02 +02:00
iommu	iommu/vt-d: Fix duplicate included linux/dma-map-ops.h	2021-01-12 16:56:20 +00:00
ipack
irqchip	ARM:	2020-12-20 10:44:05 -08:00
isdn	misdn: dsp: select CONFIG_BITREVERSE	2021-01-05 15:50:36 -08:00
leds
lightnvm	lightnvm: select CONFIG_CRC32	2021-01-03 14:54:44 -07:00
macintosh	macintosh/adb-iop: Send correct poll command	2020-12-07 10:48:16 +01:00
mailbox	mailbox: arm_mhuv2: Add driver	2020-12-09 19:26:02 -06:00
mcb
md	- Fix DM-raid's raid1 discard limits so discards work.	2021-01-15 18:01:17 -08:00
media	ARM: SoC drivers for v5.11	2020-12-16 16:38:41 -08:00
memory	Merge tag 'memory-controller-drv-tegra-5.11-3' of git://git.kernel.org/pub/scm/linux/kernel/git/krzk/linux-mem-ctrl into arm/drivers	2020-12-09 00:40:02 +01:00
memstick	memstick: r592: Fix error return in r592_probe()	2020-12-04 12:27:10 +01:00
message	SCSI misc on 20201216	2020-12-16 13:34:31 -08:00
mfd	mfd: ab8500-debugfs: Remove extraneous seq_putc	2020-12-26 09:19:49 -08:00
misc	misc: pvpanic: Check devm_ioport_map() for NULL	2021-01-07 20:28:01 +01:00
mmc	MMC core:	2020-12-15 15:57:25 -08:00
most
mtd	This pull request contains changes for JFFS2, UBI and UBIFS:	2020-12-17 17:46:34 -08:00
mux
net	nt: usb: USB_RTL8153_ECM should not default to y	2021-01-14 10:51:06 -08:00
nfc	nfc: s3fwrn5: Remove unused NCI prop commands	2020-12-16 13:09:35 -08:00
ntb	Big fix for IDT NTB and Intel NTB LTR management support	2020-12-27 09:22:55 -08:00
nubus
nvdimm	libnvdimm/label: Return -ENXIO for no slot in __blk_label_update	2020-12-16 16:53:00 -08:00
nvme	nvme: don't intialize hwmon for discovery controllers	2021-01-14 20:27:35 +01:00
nvmem
of	Driver core updates for 5.11-rc1	2020-12-15 14:02:26 -08:00
opp	opp: Call the missing clk_put() on error	2020-12-28 10:56:22 +05:30
oprofile
parisc
parport
pci	pci-v5.11-fixes-1	2020-12-25 20:17:40 -08:00
pcmcia	Merge branch 'pcmcia-next' of git://git.kernel.org/pub/scm/linux/kernel/git/brodo/linux	2020-12-19 12:50:10 -08:00
perf	Revert "arm64: Enable perf events based hard lockup detector"	2021-01-13 15:08:41 +00:00
phy	Char / Misc driver updates for 5.11-rc1	2020-12-15 14:10:09 -08:00
pinctrl	A treewide cleanup of interrupt descriptor (ab)use with all sorts of racy	2020-12-24 13:50:23 -08:00
platform	chrome platform changes for 5.11	2020-12-23 15:06:22 -08:00
pnp
power	power: supply: Fix a typo in warning message	2020-12-13 01:00:10 +01:00
powercap	Merge branches 'pm-sleep', 'pm-acpi', 'pm-domains' and 'powercap'	2020-12-15 15:26:14 +01:00
pps
ps3	powerpc/ps3: use dma_mapping_error()	2020-12-15 22:50:12 +11:00
ptp	ptp: ptp_ines: prevent build when HAS_IOMEM is not set	2021-01-06 16:17:23 -08:00
pwm	pwm: Changes for v5.11-rc1	2020-12-19 11:51:32 -08:00
rapidio	rapidio: remove unused rio_get_asm() and rio_get_device()	2020-12-15 22:46:18 -08:00
ras
regulator	Merge qcom driver fix into regulator-5.11	2021-01-04 16:23:20 +00:00
remoteproc	ARM: SoC drivers for v5.11	2020-12-16 16:38:41 -08:00
reset	ARM: SoC drivers for v5.11	2020-12-16 16:38:41 -08:00
rpmsg
rtc	RTC for 5.11	2020-12-20 10:12:06 -08:00
s390	s390/qeth: fix L2 header access in qeth_l3_osa_features_check()	2021-01-07 18:54:06 -08:00
sbus
scsi	scsi: sd: Remove obsolete variable in sd_remove()	2021-01-05 23:46:33 -05:00
sfi
sh
siox	siox: Make remove callback return void	2020-12-10 16:17:15 +01:00
slimbus	slimbus: qcom: fix potential NULL dereference in qcom_slim_prg_slew()	2020-12-10 16:23:56 +01:00
soc	OpenRISC updates for 5.11	2020-12-17 13:41:27 -08:00
soundwire	soundwire: intel: fix another unused-function warning	2020-12-05 13:11:54 +05:30
spi	spi: fix the divide by 0 error when calculating xfer waiting time	2021-01-04 14:24:58 +00:00
spmi	spmi: Add driver shutdown support	2020-12-10 10:45:36 +01:00
ssb
staging	staging: ION: remove some references to CONFIG_ION	2021-01-06 17:39:38 +01:00
target	scsi: target: Fix XCOPY NAA identifier lookup	2021-01-11 17:06:48 -05:00
tc
tee	ARM: SoC drivers for v5.11	2020-12-16 16:38:41 -08:00
thermal	- Add Alder Lake support ACPI ids (Srinivas Pandruvada)	2020-12-18 12:19:37 -08:00
thunderbolt	thunderbolt: Changes for v5.11 merge window	2020-12-08 13:41:45 +01:00
tty	RISC-V Fixes for 5.11-rc4	2021-01-16 11:00:08 -08:00
uio	uio: uio_hv_generic: use devm_kzalloc() for private data alloc	2020-12-09 19:59:00 +01:00
usb	usb: dwc3: gadget: Clear wait flag on dequeue	2021-01-07 14:24:35 +01:00
vdpa	virtio,vdpa: features, cleanups, fixes	2020-12-24 12:06:46 -08:00
vfio	ARM:	2020-12-20 10:44:05 -08:00
vhost	vhost: bugfix	2021-01-05 13:30:28 -08:00
video	UAPI Changes:	2020-12-18 12:38:28 -08:00
virt
virtio	virtio,vdpa: features, cleanups, fixes	2020-12-24 12:06:46 -08:00
visorbus
vlynq
vme	vme: switch from 'pci_' to 'dma_' API	2020-12-09 19:44:34 +01:00
w1
watchdog	linux-watchdog 5.11-rc1 tag	2020-12-23 15:01:49 -08:00
xen	xen: branch for v5.11-rc4	2021-01-15 10:52:00 -08:00
zorro
Kconfig
Makefile	asm-generic: cross-architecture timer cleanup	2020-12-16 00:07:17 -08:00