From: Jonathan Cameron <jic23@kernel.org>
To: Andy Shevchenko <andriy.shevchenko@intel.com>
Cc: "Arnav Kapoor" <kapoorarnav43@gmail.com>,
"Jyoti Bhayana" <jbhayana@google.com>,
"David Lechner" <dlechner@baylibre.com>,
"Nuno Sá" <nuno.sa@analog.com>,
"Andy Shevchenko" <andy@kernel.org>,
"Geert Uytterhoeven" <geert@linux-m68k.org>,
"kernel test robot" <lkp@intel.com>,
linux-iio@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH v2] iio: common: scmi_sensors: fix truncating 64-bit divisions
Date: Sun, 18 Oct 2026 00:17:03 +0100 [thread overview]
Message-ID: <20261018001703.5b83cd35@jic23-hlaptop> (raw)
In-Reply-To: <atEvb5jQsZCywGKs@ashevche-desk.local>
On Thu, 15 Oct 2026 22:54:23 +0300
Andy Shevchenko <andriy.shevchenko@intel.com> wrote:
> On Tue, Oct 06, 2026 at 10:22:41AM +0530, Arnav Kapoor wrote:
> > do_div() divides a 64-bit dividend by a 32-bit divisor: the divisor is
> > stored in a uint32_t on all architectures. The driver passes 64-bit
> > divisors to it in several places, so they are silently truncated:
> >
> > - scmi_iio_set_odr_val() divides by uHz, which exceeds 32 bits for
> > sampling frequencies above ~4294 Hz.
> > - convert_ns_to_freq() divides by interval_ns, which exceeds 32 bits
> > for update intervals of ~4.29 s and above. If its low 32 bits happen
> > to be zero, this is a division by zero.
> > - scmi_iio_get_odr_val(), scmi_iio_convert_interval_to_ns(),
> > scmi_iio_sensor_update_cb() and scmi_iio_get_raw_available() divide
> > by int_pow(10, n), which returns u64 and exceeds 32 bits for n >= 10.
> > The SCMI exponent fields allow values down to -16.
> >
> > Truncation results in wrong sampling frequency, timestamp and
> > raw_available values being reported to userspace.
> >
> > Use div64_u64() and div64_u64_rem(), which take a 64-bit divisor.
>
> Reviewed-by: Andy Shevchenko <andriy.shevchenko@intel.com>
>
Hmm. This came up before but they never came back with the code
fixes asked for:
https://lore.kernel.org/all/1644395873-3937-1-git-send-email-wangqing@vivo.com/
Anyhow, this looks good and I haven't heard from Jyoti for a few years
so will pick it up without waiting for a tag (most welcome though if Jyoti
is still active!)
Applied to the fixes-togreg branch of iio.git
prev parent reply other threads:[~2026-10-17 23:17 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-06 4:52 Arnav Kapoor
2026-10-15 19:54 ` Andy Shevchenko
2026-10-17 23:17 ` Jonathan Cameron [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261018001703.5b83cd35@jic23-hlaptop \
--to=jic23@kernel.org \
--cc=andriy.shevchenko@intel.com \
--cc=andy@kernel.org \
--cc=dlechner@baylibre.com \
--cc=geert@linux-m68k.org \
--cc=jbhayana@google.com \
--cc=kapoorarnav43@gmail.com \
--cc=linux-iio@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=lkp@intel.com \
--cc=nuno.sa@analog.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®