- Kernel - mailweb.openeuler.org

[openeuler:OLK-5.10] BUILD REGRESSION f1a4fad5752a86f57a260fc09d7d7ee25dbd84de
by kernel test robot 19 Nov '24

19 Nov '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: f1a4fad5752a86f57a260fc09d7d7ee25dbd84de !13178 bpf: Use raw_spinlock_t in ringbuf Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allnoconfig | |-- arch-arm64-kernel-ipi_nmi.c:error:implicit-declaration-of-function-printk_safe_enter | |-- arch-arm64-kernel-ipi_nmi.c:error:implicit-declaration-of-function-printk_safe_exit | |-- kernel-workqueue.c:error:implicit-declaration-of-function-printk_safe_enter | |-- kernel-workqueue.c:error:implicit-declaration-of-function-printk_safe_exit | |-- kismet:WARNING:unmet-direct-dependencies-detected-for-BPF_NET_GLOBAL_PROG-when-selected-by-SCHED_TASK_RELATIONSHIP | |-- kismet:WARNING:unmet-direct-dependencies-detected-for-PCI_IOV-when-selected-by-CRYPTO_DEV_HISI_MIGRATION | `-- kismet:WARNING:unmet-direct-dependencies-detected-for-TASK_PLACEMENT_BY_CPU_RANGE-when-selected-by-BPF_SCHED |-- arm64-randconfig-001-20241118 | |-- arch-arm64-include-asm-archrandom.h:error:unknown-register-name-r2-in-asm | `-- arch-arm64-include-asm-archrandom.h:error:unknown-register-name-r3-in-asm |-- x86_64-allnoconfig | `-- kernel-workqueue.c:error:implicit-declaration-of-function-printk_safe_exit-Werror-Wimplicit-function-declaration |-- x86_64-allyesconfig | `-- ld.lld:error:duplicate-symbol:debug |-- x86_64-buildonly-randconfig-001-20241118 | `-- kernel-locking-rwsem.o:warning:objtool:down_read_nested:unreachable-instruction |-- x86_64-buildonly-randconfig-002-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx1d27 |-- x86_64-buildonly-randconfig-003-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx167b |-- x86_64-buildonly-randconfig-004-20241118 | |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx1db8 | |-- kernel-trace-trace_uprobe.o:warning:objtool:__uprobe_perf_func:unreachable-instruction | `-- kernel-workqueue.c:error:implicit-declaration-of-function-printk_safe_exit-Werror-Wimplicit-function-declaration |-- x86_64-buildonly-randconfig-005-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx3d35 |-- x86_64-buildonly-randconfig-006-20241118 | |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx29be | |-- security-integrity-ima-ima.h:warning:struct-ima_digest-declared-inside-parameter-list-will-not-be-visible-outside-of-this-definition-or-declaration | `-- security-integrity-ima-ima_main.c:error:too-few-arguments-to-function-ima_appraise_measurement |-- x86_64-kexec | |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx128c | `-- kernel-trace-trace_uprobe.o:warning:objtool:__uprobe_perf_func:unreachable-instruction |-- x86_64-randconfig-001-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx3309 |-- x86_64-randconfig-002-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx452d |-- x86_64-randconfig-003-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx3360 |-- x86_64-randconfig-005-20241118 | |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx2897 | |-- drivers-gpu-drm-radeon-evergreen.o:warning:objtool:evergreen_irq_ack-falls-through-to-next-function-evergreen_resume() | |-- drivers-gpu-drm-radeon-si.o:warning:objtool:si_irq_process-falls-through-to-next-function-si_resume() | `-- drivers-gpu-drm-radeon-si.o:warning:objtool:si_irq_suspend-falls-through-to-next-function-si_pcie_gart_disable() |-- x86_64-randconfig-006-20241118 | |-- security-integrity-ima-ima.h:warning:declaration-of-struct-ima_digest-will-not-be-visible-outside-of-this-function | `-- security-integrity-ima-ima_main.c:error:too-few-arguments-to-function-call-expected-have |-- x86_64-randconfig-121-20241114 | `-- drivers-md-dm-integrity.c:sparse:sparse:incorrect-type-in-assignment-(different-base-types)-expected-unsigned-long-long-volatile-got-restricted-__le64-usertype |-- x86_64-randconfig-161-20241118 | `-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx226a |-- x86_64-rhel-9.4 | |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx1899 | `-- drivers-net-can-spi-mcp251xfd-mcp251xfd-core.c:warning:no-previous-prototype-for-mcp251xfd_tx_obj_write_sync |-- x86_64-rhel-9.4-func | |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx3eab | `-- drivers-net-can-spi-mcp251xfd-mcp251xfd-core.c:warning:no-previous-prototype-for-mcp251xfd_tx_obj_write_sync `-- x86_64-rhel-9.4-kselftests |-- arch-x86-kernel-fpu-core.o:warning:objtool:can-t-decode-instruction-at-.textx41cb `-- drivers-net-can-spi-mcp251xfd-mcp251xfd-core.c:warning:no-previous-prototype-for-mcp251xfd_tx_obj_write_sync elapsed time: 724m configs tested: 34 configs skipped: 127 tested configs: arm64 allmodconfig clang-20 arm64 allnoconfig gcc-14.2.0 arm64 randconfig-001-20241118 clang-14 arm64 randconfig-002-20241118 gcc-14.2.0 arm64 randconfig-003-20241118 gcc-14.2.0 arm64 randconfig-004-20241118 gcc-14.2.0 x86_64 allnoconfig clang-19 x86_64 allyesconfig clang-19 x86_64 buildonly-randconfig-001-20241118 clang-19 x86_64 buildonly-randconfig-002-20241118 clang-19 x86_64 buildonly-randconfig-003-20241118 gcc-12 x86_64 buildonly-randconfig-004-20241118 clang-19 x86_64 buildonly-randconfig-005-20241118 clang-19 x86_64 buildonly-randconfig-006-20241118 gcc-12 x86_64 defconfig gcc-11 x86_64 kexec clang-19 x86_64 randconfig-001-20241118 clang-19 x86_64 randconfig-002-20241118 clang-19 x86_64 randconfig-003-20241118 clang-19 x86_64 randconfig-004-20241118 clang-19 x86_64 randconfig-005-20241118 clang-19 x86_64 randconfig-006-20241118 clang-19 x86_64 randconfig-011-20241118 gcc-12 x86_64 randconfig-012-20241118 clang-19 x86_64 randconfig-013-20241118 gcc-12 x86_64 randconfig-014-20241118 clang-19 x86_64 randconfig-015-20241118 clang-19 x86_64 randconfig-016-20241118 gcc-12 x86_64 randconfig-071-20241118 gcc-12 x86_64 randconfig-072-20241118 gcc-12 x86_64 randconfig-073-20241118 gcc-11 x86_64 randconfig-074-20241118 gcc-12 x86_64 randconfig-075-20241118 gcc-12 x86_64 rhel-9.4 gcc-12 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD REGRESSION 0a813b20347c3788a30544ad2cec470b11cc197d
by kernel test robot 18 Nov '24

18 Nov '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 0a813b20347c3788a30544ad2cec470b11cc197d !13274 CVE-2024-50117 Unverified Error/Warning (likely false positive, kindly check if interested): drivers/usb/typec/tcpm.c:1864:32: sparse: sparse: restricted __le16 degrades to integer Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- arm64-allnoconfig | `-- kernel-sched-core.c:error:implicit-declaration-of-function-tg_update_affinity_domains |-- arm64-defconfig | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- arm64-randconfig-001-20241118 | |-- drivers-misc-uacce-uacce.c:error:implicit-declaration-of-function-module_refcount | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- arm64-randconfig-002-20241118 | |-- drivers-clocksource-arm_arch_timer.c:error:hisi_161010101_read_cntvct_el0-undeclared-(first-use-in-this-function) | `-- drivers-misc-uacce-uacce.c:error:implicit-declaration-of-function-module_refcount |-- arm64-randconfig-003-20241118 | |-- drivers-nvme-host-core.c:error:compat_uptr_t-undeclared-(first-use-in-this-function) | |-- drivers-nvme-host-core.c:error:expected-before-ptrval | |-- fs-ext4-inode.c:warning:unused-variable-sbi | |-- include-linux-uaccess.h:warning:accm-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:conf-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:config-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:ctl-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:dd-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:ep_ref-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:f-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:ioc_data-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:ioctl_header-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:karg-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:kbuf-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:key-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:mqstat-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:n-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:qd-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:qos-may-be-used-uninitialized | |-- include-linux-uaccess.h:warning:sa-may-be-used-uninitialized | `-- include-linux-uaccess.h:warning:stmpconf-may-be-used-uninitialized |-- arm64-randconfig-004-20241118 | |-- drivers-clocksource-arm_arch_timer.c:error:hisi_161010101_read_cntvct_el0-undeclared-(first-use-in-this-function) | |-- drivers-iommu-arm-smmu-v3.c:error:CONFIG_CMA_ALIGNMENT-undeclared-(first-use-in-this-function) | |-- drivers-nvme-host-core.c:error:compat_uptr_t-undeclared-(first-use-in-this-function) | |-- drivers-nvme-host-core.c:error:expected-before-ptrval | |-- fs-ext4-inode.c:warning:unused-variable-sbi | `-- include-linux-kernel.h:error:first-argument-to-__builtin_choose_expr-not-a-constant |-- x86_64-allyesconfig | |-- drivers-net-ethernet-stmicro-stmmac-dwmac-phytium.c:error:incompatible-pointer-to-integer-conversion-returning-void-from-a-function-with-result-type-int | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-buildonly-randconfig-001-20241118 | |-- drivers-fpga-dfl.o:warning:objtool:build_info_commit_dev:unreachable-instruction | |-- fs-aio.o:warning:objtool:aio_nr_sub:unreachable-instruction | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-buildonly-randconfig-002-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-buildonly-randconfig-003-20241118 | |-- drivers-mfd-madera-core.o:warning:objtool:missing-symbol-for-section-.text | |-- drivers-mtd-mtdpart.o:warning:objtool:missing-symbol-for-section-.text.unlikely | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-buildonly-randconfig-004-20241117 | |-- drivers-media-i2c-ak7375.o:warning:objtool:missing-symbol-for-section-.init.text | `-- sound-soc-codecs-es7241.o:warning:objtool:missing-symbol-for-section-.init.text |-- x86_64-buildonly-randconfig-004-20241118 | |-- drivers-gpu-drm-nouveau-nvkm-subdev-bios-dp.o:warning:objtool:missing-symbol-for-section-.text | `-- drivers-mtd-nand-bbt.o:warning:objtool:missing-symbol-for-section-.text |-- x86_64-buildonly-randconfig-005-20241117 | |-- drivers-media-i2c-ak7375.o:warning:objtool:missing-symbol-for-section-.exit.text | `-- drivers-media-i2c-dw9807-vcm.o:warning:objtool:missing-symbol-for-section-.exit.text |-- x86_64-buildonly-randconfig-005-20241118 | |-- drivers-misc-uacce-uacce.c:error:implicit-declaration-of-function-module_refcount-Werror-Wimplicit-function-declaration | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-buildonly-randconfig-006-20241118 | |-- block-blk-mq-debugfs-zoned.o:warning:objtool:missing-symbol-for-section-.text | |-- drivers-gnss-core.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-gpu-drm-bridge-cdns-dsi.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-gpu-drm-bridge-thc63lvd1024.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-gpu-drm-i2c-tda9950.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-hid-hid-redragon.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-iio-afe-iio-rescale.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-leds-leds-cr0014114.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-leds-leds-sc27xx-bltc.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-media-dvb-frontends-dvb-pll.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-scsi-ufs-ufs-hisi.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-spi-spi-uniphier.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-usb-dwc3-debugfs.o:warning:objtool:missing-symbol-for-section-.text | |-- drivers-usb-dwc3-dwc3-qcom.o:warning:objtool:missing-symbol-for-section-.init.text | |-- drivers-usb-host-xhci-histb.o:warning:objtool:missing-symbol-for-section-.init.text | |-- fs-ext4-inode.c:warning:unused-variable-sbi | |-- fs-gfs2-bmap.c:warning:lblock-may-be-used-uninitialized | |-- fs-nilfs2-btree.c:warning:bh-may-be-used-uninitialized | `-- security-integrity-ima-ima_crypto.o:warning:objtool:missing-symbol-for-section-.init.text |-- x86_64-defconfig | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-kexec | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-001-20241118 | `-- arch-x86-events-zhaoxin-core.c:error:redefinition-of-zhaoxin_pmu_init |-- x86_64-randconfig-003-20241118 | |-- drivers-gpu-drm-nouveau-nvkm-subdev-clk-nv50.o:warning:objtool:read_pll_ref:can-t-find-switch-jump-table | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-005-20241118 | |-- arch-x86-events-zhaoxin-core.c:error:redefinition-of-zhaoxin_pmu_init | |-- drivers-gpu-drm-amd-amdgpu-amdgpu_ids.o:warning:objtool:amdgpu_vmid_grab:unreachable-instruction | |-- drivers-usb-host-ehci-hcd.o:warning:objtool:ehci_endpoint_disable:unreachable-instruction | `-- fs-debugfs-file.o:warning:objtool:full_proxy_open:unreachable-instruction |-- x86_64-randconfig-006-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-011-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-012-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-014-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-015-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-071-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-072-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-073-20241118 | |-- arch-x86-events-zhaoxin-core.c:error:redefinition-of-zhaoxin_pmu_init | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-075-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-076-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-randconfig-123-20241117 | |-- drivers-gpu-drm-amd-amdkfd-kfd_int_process_v9.c:sparse:sparse:cast-to-restricted-__le32 | `-- drivers-usb-typec-tcpm.c:sparse:sparse:restricted-__le16-degrades-to-integer |-- x86_64-randconfig-161-20241118 | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-rhel-9.4 | |-- drivers-net-can-usb-kvaser_usb-kvaser_usb_hydra.c:warning:new_state-may-be-used-uninitialized | `-- fs-ext4-inode.c:warning:unused-variable-sbi |-- x86_64-rhel-9.4-func | `-- fs-ext4-inode.c:warning:unused-variable-sbi `-- x86_64-rhel-9.4-kselftests `-- fs-ext4-inode.c:warning:unused-variable-sbi elapsed time: 721m configs tested: 36 configs skipped: 139 tested configs: arm64 allmodconfig gcc-14.2.0 arm64 allnoconfig gcc-14.2.0 arm64 defconfig gcc-14.2.0 arm64 randconfig-001-20241118 gcc-14.2.0 arm64 randconfig-002-20241118 gcc-14.2.0 arm64 randconfig-003-20241118 gcc-14.2.0 arm64 randconfig-004-20241118 gcc-14.2.0 x86_64 allnoconfig clang-19 x86_64 allyesconfig clang-19 x86_64 buildonly-randconfig-001-20241118 clang-19 x86_64 buildonly-randconfig-002-20241118 clang-19 x86_64 buildonly-randconfig-003-20241118 gcc-12 x86_64 buildonly-randconfig-004-20241118 clang-19 x86_64 buildonly-randconfig-005-20241118 clang-19 x86_64 buildonly-randconfig-006-20241118 gcc-12 x86_64 defconfig gcc-11 x86_64 kexec clang-19 x86_64 randconfig-001-20241118 clang-19 x86_64 randconfig-002-20241118 clang-19 x86_64 randconfig-003-20241118 clang-19 x86_64 randconfig-004-20241118 clang-19 x86_64 randconfig-005-20241118 clang-19 x86_64 randconfig-006-20241118 clang-19 x86_64 randconfig-011-20241118 gcc-12 x86_64 randconfig-012-20241118 clang-19 x86_64 randconfig-013-20241118 gcc-12 x86_64 randconfig-014-20241118 clang-19 x86_64 randconfig-015-20241118 clang-19 x86_64 randconfig-016-20241118 gcc-12 x86_64 randconfig-071-20241118 gcc-12 x86_64 randconfig-072-20241118 gcc-12 x86_64 randconfig-073-20241118 gcc-11 x86_64 randconfig-074-20241118 gcc-12 x86_64 randconfig-075-20241118 gcc-12 x86_64 randconfig-076-20241118 gcc-12 x86_64 rhel-9.4 gcc-12 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 v2 0/2] fix CVE-2024-50141
by Xiangwei Li 18 Nov '24

18 Nov '24

Dan Carpenter (1): ACPI: PRM: Clean up guid type in struct prm_handler_info Koba Ko (1): ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context drivers/acpi/prmt.c | 29 +++++++++++++++++++++++------ 1 file changed, 23 insertions(+), 6 deletions(-) -- 2.25.1

2 3

[OLK-5.10 0/2] fix CVE-2024-50141
by Xiangwei Li 18 Nov '24

18 Nov '24

Dan Carpenter (1): ACPI: PRM: Clean up guid type in struct prm_handler_info Koba Ko (1): ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context drivers/acpi/prmt.c | 29 +++++++++++++++++++++++------ 1 file changed, 23 insertions(+), 6 deletions(-) -- 2.25.1

1 2

[openeuler:OLK-6.6 1474/1474] drivers/gpu/drm/amd/amdgpu/../display/dmub/src/dmub_srv.c:484:77: sparse: sparse: Using plain integer as NULL pointer
by kernel test robot 18 Nov '24

18 Nov '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 8a039651010897592567f5751c4e706ab794e9c0 commit: 2991f29868ddf9a3dd2dd132323ae2a4558b7bb0 [1474/1474] drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox config: x86_64-randconfig-121-20241118 (https://download.01.org/0day-ci/archive/20241118/202411182104.9oMPXZuE-lkp@…) compiler: gcc-12 (Debian 12.2.0-14) 12.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20241118/202411182104.9oMPXZuE-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202411182104.9oMPXZuE-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/gpu/drm/amd/amdgpu/../display/dmub/src/dmub_srv.c:484:77: sparse: sparse: Using plain integer as NULL pointer vim +484 drivers/gpu/drm/amd/amdgpu/../display/dmub/src/dmub_srv.c 457 458 enum dmub_status dmub_srv_calc_mem_info(struct dmub_srv *dmub, 459 const struct dmub_srv_memory_params *params, 460 struct dmub_srv_fb_info *out) 461 { 462 uint8_t *cpu_base; 463 uint64_t gpu_base; 464 uint32_t i; 465 466 if (!dmub->sw_init) 467 return DMUB_STATUS_INVALID; 468 469 memset(out, 0, sizeof(*out)); 470 471 if (params->region_info->num_regions != DMUB_NUM_WINDOWS) 472 return DMUB_STATUS_INVALID; 473 474 cpu_base = (uint8_t *)params->cpu_fb_addr; 475 gpu_base = params->gpu_fb_addr; 476 477 for (i = 0; i < DMUB_NUM_WINDOWS; ++i) { 478 const struct dmub_region *reg = 479 &params->region_info->regions[i]; 480 481 out->fb[i].cpu_addr = cpu_base + reg->base; 482 out->fb[i].gpu_addr = gpu_base + reg->base; 483 > 484 if (i == DMUB_WINDOW_4_MAILBOX && params->cpu_inbox_addr != 0) { 485 out->fb[i].cpu_addr = (uint8_t *)params->cpu_inbox_addr + reg->base; 486 out->fb[i].gpu_addr = params->gpu_inbox_addr + reg->base; 487 } 488 489 out->fb[i].size = reg->top - reg->base; 490 } 491 492 out->num_fb = DMUB_NUM_WINDOWS; 493 494 return DMUB_STATUS_OK; 495 } 496 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-50195
by Gu Bowen 18 Nov '24

18 Nov '24

Jinjie Ruan (2): posix-clock: Fix missing timespec64 check in pc_clock_settime() posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() kernel/time/posix-clock.c | 3 +++ 1 file changed, 3 insertions(+) -- 2.25.1

2 3

[PATCH OLK-6.6] RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
by Zhang Changzhong 18 Nov '24

18 Nov '24

From: Selvin Xavier <selvin.xavier(a)broadcom.com> mainline inclusion from mainline-v6.12-rc4 commit 8be3e5b0c96beeefe9d5486b96575d104d3e7d17 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IB2SU7 CVE: CVE-2024-50157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Driver waits indefinitely for the fifo occupancy to go below a threshold as soon as the pacing interrupt is received. This can cause soft lockup on one of the processors, if the rate of DB is very high. Add a loop count for FPGA and exit the __wait_for_fifo_occupancy_below_th if the loop is taking more time. Pacing will be continuing until the occupancy is below the threshold. This is ensured by the checks in bnxt_re_pacing_timer_exp and further scheduling the work for pacing based on the fifo occupancy. Fixes: 2ad4e6303a6d ("RDMA/bnxt_re: Implement doorbell pacing algorithm") Link: https://patch.msgid.link/r/1728373302-19530-7-git-send-email-selvin.xavier@… Reviewed-by: Kalesh AP <kalesh-anakkur.purayil(a)broadcom.com> Reviewed-by: Chandramohan Akula <chandramohan.akula(a)broadcom.com> Signed-off-by: Selvin Xavier <selvin.xavier(a)broadcom.com> Signed-off-by: Jason Gunthorpe <jgg(a)nvidia.com> Conflicts: drivers/infiniband/hw/bnxt_re/main.c [24943dcdc156 ("RDMA/bnxt_re: Disable doorbell moderation if hardware register read fails") not merged] Signed-off-by: Zhang Changzhong <zhangchangzhong(a)huawei.com> --- drivers/infiniband/hw/bnxt_re/main.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/drivers/infiniband/hw/bnxt_re/main.c b/drivers/infiniband/hw/bnxt_re/main.c index 0373d0e..8b032a2 100644 --- a/drivers/infiniband/hw/bnxt_re/main.c +++ b/drivers/infiniband/hw/bnxt_re/main.c @@ -484,6 +484,8 @@ static void bnxt_re_set_default_pacing_data(struct bnxt_re_dev *rdev) static void __wait_for_fifo_occupancy_below_th(struct bnxt_re_dev *rdev) { + struct bnxt_qplib_db_pacing_data *pacing_data = rdev->qplib_res.pacing_data; + u32 retry_fifo_check = 1000; u32 read_val, fifo_occup; /* loop shouldn't run infintely as the occupancy usually goes @@ -500,6 +502,14 @@ static void __wait_for_fifo_occupancy_below_th(struct bnxt_re_dev *rdev) if (fifo_occup < rdev->qplib_res.pacing_data->pacing_th) break; + if (!retry_fifo_check--) { + dev_info_once(rdev_to_dev(rdev), + "%s: fifo_occup = 0x%xfifo_max_depth = 0x%x pacing_th = 0x%x\n", + __func__, fifo_occup, pacing_data->fifo_max_depth, + pacing_data->pacing_th); + break; + } + } } -- 2.9.5

2 1

[PATCH OLK-6.6] ima: fix a compilation error with ima_bprm_creds_for_exec()
by Gu Bowen 18 Nov '24

18 Nov '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAZ996 CVE: NA ---------------------------------------------------------------------- The new feature script execution check has added a new security function ima_bprm_creds_for_exe, which causes a compilation error when ima is not enabled, we fix it. Fixes: b89997c5e3ff ("IMA support script execution check") Signed-off-by: Gu Bowen <gubowen5(a)huawei.com> --- include/linux/ima.h | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/include/linux/ima.h b/include/linux/ima.h index 76d0f71d7955..eb119cd62f02 100644 --- a/include/linux/ima.h +++ b/include/linux/ima.h @@ -63,6 +63,11 @@ static inline int ima_bprm_check(struct linux_binprm *bprm) return 0; } +static inline int ima_bprm_creds_for_exec(struct linux_binprm *bprm) +{ + return 0; +} + static inline int ima_file_check(struct file *file, int mask) { return 0; -- 2.25.1

2 1

[PATCH OLK-5.10] bpf, arm64: Fix address emission with tag-based KASAN enabled
by Tengda Wu 18 Nov '24

18 Nov '24

From: Peter Collingbourne <pcc(a)google.com> mainline inclusion from mainline-v6.12-rc5 commit a552e2ef5fd1a6c78267cd4ec5a9b49aa11bbb1c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IB2YVC CVE: CVE-2024-50203 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- When BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image struct on the stack is passed during the size calculation pass and an address on the heap is passed during code generation. This may cause a heap buffer overflow if the heap address is tagged because emit_a64_mov_i64() will emit longer code than it did during the size calculation pass. The same problem could occur without tag-based KASAN if one of the 16-bit words of the stack address happened to be all-ones during the size calculation pass. Fix the problem by assuming the worst case (4 instructions) when calculating the size of the bpf_tramp_image address emission. Fixes: 19d3c179a377 ("bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG") Signed-off-by: Peter Collingbourne <pcc(a)google.com> Signed-off-by: Daniel Borkmann <daniel(a)iogearbox.net> Acked-by: Xu Kuohai <xukuohai(a)huawei.com> Link: https://linux-review.googlesource.com/id/I1496f2bc24fba7a1d492e16e2b94cf437… Link: https://lore.kernel.org/bpf/20241018221644.3240898-1-pcc@google.com Conflicts: arch/arm64/net/bpf_jit_comp.c [This conflict arises from the fact that the previous patch, 2a5ab77af7f9 ("bpf, arm64: Add bpf trampoline for arm64"), made some minor adjustments for version 5.10 without fully aligning with the community] Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- arch/arm64/net/bpf_jit_comp.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/arch/arm64/net/bpf_jit_comp.c b/arch/arm64/net/bpf_jit_comp.c index adab5f03a306..af5760c0d2e7 100644 --- a/arch/arm64/net/bpf_jit_comp.c +++ b/arch/arm64/net/bpf_jit_comp.c @@ -1647,7 +1647,11 @@ static int prepare_trampoline(struct jit_ctx *ctx, struct bpf_tramp_image *im, emit(A64_STR64I(A64_R(19), A64_SP, regs_off), ctx); if (flags & BPF_TRAMP_F_CALL_ORIG) { - emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); + /* for the first pass, assume the worst case */ + if (!ctx->image) + ctx->idx += 4; + else + emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); emit_call((const u64)__bpf_tramp_enter, ctx); } @@ -1688,7 +1692,11 @@ static int prepare_trampoline(struct jit_ctx *ctx, struct bpf_tramp_image *im, if (flags & BPF_TRAMP_F_CALL_ORIG) { im->ip_epilogue = ctx->image + ctx->idx; - emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); + /* for the first pass, assume the worst case */ + if (!ctx->image) + ctx->idx += 4; + else + emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); emit_call((const u64)__bpf_tramp_exit, ctx); } -- 2.34.1

2 1

[PATCH OLK-6.6] bpf, arm64: Fix address emission with tag-based KASAN enabled
by Tengda Wu 18 Nov '24

18 Nov '24

From: Peter Collingbourne <pcc(a)google.com> mainline inclusion from mainline-v6.12-rc5 commit a552e2ef5fd1a6c78267cd4ec5a9b49aa11bbb1c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IB2YVC CVE: CVE-2024-50203 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- When BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image struct on the stack is passed during the size calculation pass and an address on the heap is passed during code generation. This may cause a heap buffer overflow if the heap address is tagged because emit_a64_mov_i64() will emit longer code than it did during the size calculation pass. The same problem could occur without tag-based KASAN if one of the 16-bit words of the stack address happened to be all-ones during the size calculation pass. Fix the problem by assuming the worst case (4 instructions) when calculating the size of the bpf_tramp_image address emission. Fixes: 19d3c179a377 ("bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG") Signed-off-by: Peter Collingbourne <pcc(a)google.com> Signed-off-by: Daniel Borkmann <daniel(a)iogearbox.net> Acked-by: Xu Kuohai <xukuohai(a)huawei.com> Link: https://linux-review.googlesource.com/id/I1496f2bc24fba7a1d492e16e2b94cf437… Link: https://lore.kernel.org/bpf/20241018221644.3240898-1-pcc@google.com Conflicts: arch/arm64/net/bpf_jit_comp.c [This conflict is due to us not merging a cache optimization commit 96b0f5addc7a ('arm64, bpf: Use bpf_prog_pack for arm64 bpf trampoline')] Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- arch/arm64/net/bpf_jit_comp.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/arch/arm64/net/bpf_jit_comp.c b/arch/arm64/net/bpf_jit_comp.c index d6f4aebbad69..76ae4a3131ba 100644 --- a/arch/arm64/net/bpf_jit_comp.c +++ b/arch/arm64/net/bpf_jit_comp.c @@ -1949,7 +1949,11 @@ static int prepare_trampoline(struct jit_ctx *ctx, struct bpf_tramp_image *im, emit(A64_STR64I(A64_R(20), A64_SP, regs_off + 8), ctx); if (flags & BPF_TRAMP_F_CALL_ORIG) { - emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); + /* for the first pass, assume the worst case */ + if (!ctx->image) + ctx->idx += 4; + else + emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); emit_call((const u64)__bpf_tramp_enter, ctx); } @@ -1993,7 +1997,11 @@ static int prepare_trampoline(struct jit_ctx *ctx, struct bpf_tramp_image *im, if (flags & BPF_TRAMP_F_CALL_ORIG) { im->ip_epilogue = ctx->image + ctx->idx; - emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); + /* for the first pass, assume the worst case */ + if (!ctx->image) + ctx->idx += 4; + else + emit_a64_mov_i64(A64_R(0), (const u64)im, ctx); emit_call((const u64)__bpf_tramp_exit, ctx); } -- 2.34.1

2 1

2025

2024

2023

2022

2021

2020

2019

Kernel