From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 22F89181334 for ; Sun, 12 Jul 2026 22:00:41 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.215.181 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783893643; cv=none; b=Mm7CyqUItYzT2OJag6SUYbH8xTi3miJ0YC2FCsMZtZTeckCu5NNOAPc/8HuOQWRM2z6PJPX9Pd1sH7xpI+1HsZTzGXC2/6lmu6CAdWBY0atAi0EfYjuUH2MIKQEu1K4SZQGhB8OBDbzaR9DhbJt6aHGoZuBmRIRcEx+z0+YRI6Q= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783893643; c=relaxed/simple; bh=rSZSRyjlEY0I56GUB2ttg+LeJKLDJz1BOhO4bU2aDco=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=N0lxioO4FhCHFk6nEvuxORscnYUKbWHgD0+JnKg0OoXvkzUu6DjgjmMNh7KkPFBeRBIDmtev9Vy668nJlqV7JX3bDt8L7QUhG/yZYUK7jUsxdX7mObonvf4eEeHchCjH/NDpkOdeDk4uOG6kPZe5/K/soXKY8KNJm2IhZ2877hw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=cFITpBrN; arc=none smtp.client-ip=209.85.215.181 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="cFITpBrN" Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-c9b373d5af0so1784562a12.2 for ; Sun, 12 Jul 2026 15:00:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1783893641; x=1784498441; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=1ROlD6mdfN7+CvBywkSTjOBx4JT6mtPJE0JLh+dzz94=; b=cFITpBrN4oqt6wS+Z+aSoLPbPhWqczp+7BGmI12uxmm4pR+RanpI2AIUVfzsjwGqX0 Ygj931IVx7AgL2EK5Yx0wt0dcjvTl6ZseZHRJ+NyHoRkvpSJaAIWntMexjc72yMZOIaJ 6WzC0nb3d7q3bS18+Hb143dB6Xd1rxPYTeB/oigGVPzYFTjdCPwx2OUnO5BGJfMsP9Y5 OjuBalcRg++/oSUu0zwo07GSaronX6RLfear5YO6Lyko7MK76z3ofFSKakN2uGlAbi0O OJwfm9il7CN44w307rHFq4XEYQu6QbCnluJWVgbowb0kAlr+lvtUN/BdVsfASOHYFGO8 9vvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783893641; x=1784498441; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=1ROlD6mdfN7+CvBywkSTjOBx4JT6mtPJE0JLh+dzz94=; b=SPRKmybSllc0JIpGDEDq0hCskynl3Ky/ivyiR3mMiZ+jgvuJyubQf2BDpZ4PSorC6/ lU05U5C0znrg3kHwvWWAulcawiHJ/BSxPTRQoTnHgG8R8d+k+B3QO2JJFYCvdXJsfxoq hmwiBqSomnZPaAj9LGD1dlwnLVR+YVrzes9XYoS9nuCY8Arsg6GYzddxzFMWioqiQ/1k W0h60L8sHwFzXyhCbm7RqRVFZ/EdQMDv0EHpVzdvSSGvdWeBGAneO1qd6Ewtnodf9HqI M813N4ICV348H8xvHQ06/jgkPzKGyrxFd95/KWCRApIMMvXjm89q3ccD3BkQNGxJcHlE mY6Q== X-Forwarded-Encrypted: i=1; AHgh+RoMbqrQlCFaHH+NV+zc1eEifmF78Hhy5GwX2C53gqmmY94cQfwLa7rezNBZF/zw2M7xfHVQ6DQVXwCKT/o=@vger.kernel.org X-Gm-Message-State: AOJu0YzOtMPQ47xHmFF2/SiI5I+m7D2ARZ8lnFiMZabNyJajRkXUxso9 aZ325Q5563pma9DfggU+44bNUpAW4H6GPSj0FIvbKxCVM80sIHxFc0LW X-Gm-Gg: AfdE7ck4me61vEGqW5vVrnhu7BqpRk6u2S6ci16BG9/qf4/A+cHSiFVHk4v4BRtcOnu JDbsU04J7JKkRJAmErzVngkyJ4C8K04sVFxaP87m6rujtMnahvtJ0jYGF3or5xpBILvR2tTP0/X 3x0JoaiBGszCR+50y0AVCfzNDE0rGgjlhIUVa9PNOMAy7A5GvvOCfAmeN4kDf/0uGbW9S7qiSE0 hDpRBHfP+vKV3oBBejPF5TCmWaazbYuTMGtOR0YEnpa+zf1ZjUDVHY4yL5S2fdUJHtTculOYCM2 u96ObEtLtgC4nLcWnBOD6/H8cun+QWx7bBk1ugudy/rffviKh8qqyaNLP91iqsqLIP564YFQaQX L2ENmJD17HJzAsnVHobtGgyXL0l6smjwmiEZxG2DjEiWL9UcrZ97KTKJJsRrd83V/ofyYC6Umen f3VWcENmNCdikIGsdRMSrn5exig3UAxwo1Shb799xoFrfaI5MYiMIdbbv1W2AVd1G9fMoY0+syT NeuMC4XXBnXLzeD3e3N5tkzfF+JUZor7ykazbCYlVjBPUuoW/q6QFogrMRps5Sjcw== X-Received: by 2002:a05:6a21:7483:b0:3bf:a0e5:99a1 with SMTP id adf61e73a8af0-3c110a1a59dmr7803427637.51.1783893641417; Sun, 12 Jul 2026 15:00:41 -0700 (PDT) Received: from ryzen.lan ([2601:644:8000:7a86::e35]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-313cb804197sm14856305eec.13.2026.07.12.15.00.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 12 Jul 2026 15:00:40 -0700 (PDT) From: Rosen Penev To: dmaengine@vger.kernel.org Cc: Andy Shevchenko , Vinod Koul , Frank Li , Kees Cook , "Gustavo A. R. Silva" , linux-kernel@vger.kernel.org (open list), linux-hardening@vger.kernel.org (open list:KERNEL HARDENING (not covered by other areas):Keyword:\b__counted_by(_le|_be|_ptr)?\b) Subject: [PATCHv2 0/2] dmaengine: idma64: descriptor allocation and length limit fixes Date: Sun, 12 Jul 2026 15:00:37 -0700 Message-ID: <20260712220039.924958-1-rosenp@gmail.com> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit This small series cleans up the idma64 descriptor allocation and fixes a long-standing truncation bug in idma64_prep_slave_sg(). Patch 1 replaces the open-coded two-stage allocation in idma64_alloc_desc() with kzalloc_flex() using a flexible array member for the hardware descriptor list, annotated with __counted_by for extra runtime bounds checking. The now-redundant helper is removed. Patch 2 addresses the hardware limit. The iDMA 64-bit CTL_HI BLOCK_TS field is only 17 bits (IDMA64C_CTLH_BLOCK_TS_MASK = 0x1ffff), so when a scatterlist entry exceeds that size the driver would silently truncate the transfer length. Use sg_nents_for_dma() to size the descriptor ring after splitting oversized entries, and iterate the new per-chunk loop so each hardware descriptor stays within the field. Rosen Penev (2): Rosen Penev (2): dmaengine: idma64: use kzalloc_flex dmaengine: idma64: use sg_nents_for_dma to respect hardware descriptor length limit v2: add second patch drivers/dma/idma64.c | 70 ++++++++++++++++++++------------------------ drivers/dma/idma64.h | 7 +++-- 2 files changed, 36 insertions(+), 41 deletions(-) Changes since v1: - (fill in changes here) -- 2.55.0