[PATCH 0/2] s390/dasd patches

STALE1857d

Revision v1 of 2 in this series.

4 messages, 2 authors, 2021-07-01 · open the first message on its own page

[PATCH 0/2] s390/dasd patches

From: Stefan Haberland <sth@linux.ibm.com>
Date: 2021-07-01 14:22:32

Hi Jens,

please apply the following two patches that unexport a DASD symbol and improve a DASD structure.


Christoph Hellwig (1):
  dasd: unexport dasd_set_target_state

Kees Cook (1):
  s390/dasd: Avoid field over-reading memcpy()

 drivers/s390/block/dasd.c      | 1 -
 drivers/s390/block/dasd_eckd.c | 2 +-
 drivers/s390/block/dasd_eckd.h | 6 ++++--
 3 files changed, 5 insertions(+), 4 deletions(-)

-- 
2.25.1

[PATCH 2/2] s390/dasd: Avoid field over-reading memcpy()

From: Stefan Haberland <sth@linux.ibm.com>
Date: 2021-07-01 14:22:32

From: Kees Cook <redacted>

In preparation for FORTIFY_SOURCE performing compile-time and run-time
field array bounds checking for memcpy(), memmove(), and memset(),
avoid intentionally reading across neighboring array fields.

Add a wrapping structure to serve as the memcpy() source, so the compiler
can do appropriate bounds checking, avoiding this future warning:

In function '__fortify_memcpy',
    inlined from 'create_uid' at drivers/s390/block/dasd_eckd.c:749:2:
./include/linux/fortify-string.h:246:4: error: call to '__read_overflow2_field' declared with attribute error: detected read beyond size of field (2nd parameter)

Signed-off-by: Kees Cook <redacted>
Signed-off-by: Stefan Haberland <sth@linux.ibm.com>
---
 drivers/s390/block/dasd_eckd.c | 2 +-
 drivers/s390/block/dasd_eckd.h | 6 ++++--
 2 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/drivers/s390/block/dasd_eckd.c b/drivers/s390/block/dasd_eckd.c
index a6ac505cbdd7..0de1a463c509 100644
--- a/drivers/s390/block/dasd_eckd.c
+++ b/drivers/s390/block/dasd_eckd.c
@@ -746,7 +746,7 @@ static void create_uid(struct dasd_eckd_private *private)
 	memcpy(uid->vendor, private->ned->HDA_manufacturer,
 	       sizeof(uid->vendor) - 1);
 	EBCASC(uid->vendor, sizeof(uid->vendor) - 1);
-	memcpy(uid->serial, private->ned->HDA_location,
+	memcpy(uid->serial, &private->ned->serial,
 	       sizeof(uid->serial) - 1);
 	EBCASC(uid->serial, sizeof(uid->serial) - 1);
 	uid->ssid = private->gneq->subsystemID;
diff --git a/drivers/s390/block/dasd_eckd.h b/drivers/s390/block/dasd_eckd.h
index 73651211789f..65e4630ad2ae 100644
--- a/drivers/s390/block/dasd_eckd.h
+++ b/drivers/s390/block/dasd_eckd.h
@@ -332,8 +332,10 @@ struct dasd_ned {
 	__u8 dev_type[6];
 	__u8 dev_model[3];
 	__u8 HDA_manufacturer[3];
-	__u8 HDA_location[2];
-	__u8 HDA_seqno[12];
+	struct {
+		__u8 HDA_location[2];
+		__u8 HDA_seqno[12];
+	} serial;
 	__u8 ID;
 	__u8 unit_addr;
 } __attribute__ ((packed));
-- 
2.25.1

[PATCH 1/2] dasd: unexport dasd_set_target_state

From: Stefan Haberland <sth@linux.ibm.com>
Date: 2021-07-01 14:22:34

From: Christoph Hellwig <hch@lst.de>

dasd_set_target_state is only used inside of dasd_mod.ko, so don't
export it.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Stefan Haberland <sth@linux.ibm.com>
---
 drivers/s390/block/dasd.c | 1 -
 1 file changed, 1 deletion(-)
diff --git a/drivers/s390/block/dasd.c b/drivers/s390/block/dasd.c
index c8df75e99f4c..e34c6cc61983 100644
--- a/drivers/s390/block/dasd.c
+++ b/drivers/s390/block/dasd.c
@@ -621,7 +621,6 @@ void dasd_set_target_state(struct dasd_device *device, int target)
 	mutex_unlock(&device->state_mutex);
 	dasd_put_device(device);
 }
-EXPORT_SYMBOL(dasd_set_target_state);
 
 /*
  * Enable devices with device numbers in [from..to].
-- 
2.25.1

Re: [PATCH 0/2] s390/dasd patches

From: Jens Axboe <axboe@kernel.dk>
Date: 2021-07-01 15:27:29

On 7/1/21 8:22 AM, Stefan Haberland wrote:
Hi Jens,

please apply the following two patches that unexport a DASD symbol and improve a DASD structure.


Christoph Hellwig (1):
  dasd: unexport dasd_set_target_state

Kees Cook (1):
  s390/dasd: Avoid field over-reading memcpy()

 drivers/s390/block/dasd.c      | 1 -
 drivers/s390/block/dasd_eckd.c | 2 +-
 drivers/s390/block/dasd_eckd.h | 6 ++++--
 3 files changed, 5 insertions(+), 4 deletions(-)
Applied, thanks.

-- 
Jens Axboe
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help