On Mon, 03 Jun 2024 13:25:06 +0100, "tip-bot2 for Hagar Hemdan" <tip-bot2@xxxxxxxxxxxxx> wrote: > > The following commit has been merged into the irq/urgent branch of tip: > > Commit-ID: 8dd4302d37bb2fe842acb3be688d393254b4f126 > Gitweb: https://git.kernel.org/tip/8dd4302d37bb2fe842acb3be688d393254b4f126 > Author: Hagar Hemdan <hagarhem@xxxxxxxxxx> > AuthorDate: Fri, 31 May 2024 16:21:44 > Committer: Thomas Gleixner <tglx@xxxxxxxxxxxxx> > CommitterDate: Mon, 03 Jun 2024 14:19:42 +02:00 > > irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() > > its_vlpi_prop_update() calls lpi_write_config() which obtains the > mapping information for a VLPI without lock held. So it could race > with its_vlpi_unmap(). > > Since all calls from its_irq_set_vcpu_affinity() require the same > lock to be held, hoist the locking there instead of sprinkling the > locking all over the place. > > This bug was discovered using Coverity Static Analysis Security Testing > (SAST) by Synopsys, Inc. > > [ tglx: Use guard() instead of goto ] Good call. Except that... > > Fixes: 015ec0386ab6 ("irqchip/gic-v3-its: Add VLPI configuration handling") > Suggested-by: Marc Zyngier <maz@xxxxxxxxxx> > Signed-off-by: Hagar Hemdan <hagarhem@xxxxxxxxxx> > Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx> > Cc: stable@xxxxxxxxxxxxxxx > Reviewed-by: Marc Zyngier <maz@xxxxxxxxxx> > Link: https://lore.kernel.org/r/20240531162144.28650-1-hagarhem@xxxxxxxxxx > --- > drivers/irqchip/irq-gic-v3-its.c | 44 ++++++++----------------------- > 1 file changed, 12 insertions(+), 32 deletions(-) > > diff --git a/drivers/irqchip/irq-gic-v3-its.c b/drivers/irqchip/irq-gic-v3-its.c > index 40ebf17..c696ac9 100644 > --- a/drivers/irqchip/irq-gic-v3-its.c > +++ b/drivers/irqchip/irq-gic-v3-its.c [...] > @@ -1992,6 +1970,8 @@ static int its_irq_set_vcpu_affinity(struct irq_data *d, void *vcpu_info) > if (!is_v4(its_dev->its)) > return -EINVAL; > > + guard(raw_spinlock_irq, &its_dev->event_map.vlpi_lock); > + I don't think this compiles as is, due to the funky syntax required. Thanks, M. -- Without deviation from the norm, progress is not possible.
![]() |