github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-07-27 09:36:22 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
master
linux/drivers/iommu
History
Li RongQing 754f8efe45 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() 
dmar_latency_disable() intends to zero out only the single
latency_statistic entry for the given type, but the memset size was
computed as sizeof(*lstat) * DMAR_LATENCY_NUM, which clears the entire
array starting from &lstat[type].

When type > 0, this writes beyond the end of the allocated array,
corrupting adjacent memory.

Fix by using sizeof(*lstat) to clear only the target entry.

Fixes: 55ee5e67a5 ("iommu/vt-d: Add common code for dmar latency performance monitors")
Signed-off-by: Li RongQing <lirongqing@baidu.com>
Signed-off-by: Will Deacon <will@kernel.org>
2026-07-21 11:34:51 +00:00
..
amd iommu/amd: Bound the early ACPI HID map 2026-07-21 11:34:46 +00:00
arm Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files) 2026-07-03 07:38:17 +02:00
generic_pt Merge branches 'apple/dart', 'arm/smmu/updates', 'arm/smmu/bindings', 'rockchip', 'verisilicon', 'riscv', 'intel/vt-d', 'amd/amd-vi' and 'core' into next 2026-06-12 14:57:23 +02:00
hyperv iommu/hyperv: Create hyperv subdirectory under drivers/iommu 2026-06-07 22:55:56 -07:00
intel iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() 2026-07-21 11:34:51 +00:00
iommufd iommufd: Set upper bounds on cache invalidation entry_num and entry_len 2026-06-12 10:44:43 -03:00
riscv iommu/riscv: Add NAPOT range invalidation support 2026-05-19 10:48:09 +02:00
apple-dart.c iommu/apple-dart: correct CONFIG_PCIE_APPLE macro name in comment 2026-06-11 15:42:23 +02:00
dma-iommu.c IOMMU Updates for Linux v7.2 2026-06-17 12:24:50 -07:00
dma-iommu.h iommu: Tidy domain for iommu_setup_dma_ops() 2026-01-10 10:26:43 +01:00
exynos-iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
fsl_pamu_domain.c iommu: Pass in old domain to attach_dev callback functions 2025-10-27 13:55:35 +01:00
fsl_pamu_domain.h
fsl_pamu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
fsl_pamu.h
io-pgfault.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
io-pgtable-arm-selftests.c iommu/io-pgtable-arm-selftests: Use KUnit 2025-11-13 16:25:32 +01:00
io-pgtable-arm-v7s.c iommu, debugobjects: avoid gcc-16.1 section mismatch warnings 2026-05-28 09:07:12 +02:00
io-pgtable-arm.c iommu/io-pgtable-arm: Use address conversion consistently 2026-05-19 11:03:45 +02:00
io-pgtable-arm.h
io-pgtable-dart.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
io-pgtable.c iommu/amd: Remove AMD io_pgtable support 2025-11-05 09:08:57 +01:00
iommu-debug-pagealloc.c iommu: debug-pagealloc: Use page_ext_get_from_phys() 2026-01-21 12:51:49 +01:00
iommu-debugfs.c
iommu-pages.c iommu/pages: Add support for incoherent IOMMU page table walkers 2025-11-05 09:47:43 +01:00
iommu-pages.h iommu/pages: Fix iommu_pages_flush_incoherent() for non-x86 2026-04-27 13:59:36 +02:00
iommu-priv.h iommu: Add calls for IOMMU_DEBUG_PAGEALLOC 2026-01-10 10:52:26 +01:00
iommu-sva.c iommu/sva: Fix crash in iommu_sva_unbind_device() 2026-03-17 14:00:36 +01:00
iommu-sysfs.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
iommu-traces.c
iommu.c Linux 7.1-rc5 2026-05-25 02:40:57 +02:00
iova.c iommu/iova: Add NULL check in iova_magazine_free() 2026-03-17 13:28:37 +01:00
ipmmu-vmsa.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
irq_remapping.c iommu/hyperv: Create hyperv subdirectory under drivers/iommu 2026-06-07 22:55:56 -07:00
irq_remapping.h
Kconfig hyperv-next for v7.2-rc1 2026-06-22 08:06:13 -07:00
Makefile hyperv-next for v7.2-rc1 2026-06-22 08:06:13 -07:00
msm_iommu_hw-8xxx.h
msm_iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
msm_iommu.h
mtk_iommu_v1.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
mtk_iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
of_iommu.c of: Factor arguments passed to of_map_id() into a struct 2026-06-12 10:25:39 -05:00
omap-iommu-debug.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
omap-iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
omap-iommu.h iommu/omap: fix device leaks on probe_device() 2025-11-17 09:49:44 +01:00
omap-iopgtable.h
rockchip-iommu.c iommu/rockchip: disable fetch dte time limit 2026-06-02 10:42:54 +02:00
s390-iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
sprd-iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
sun50i-iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
tegra-smmu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
virtio-iommu.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
vsi-iommu.c iommu/vsi: Use list_for_each_entry() 2026-05-28 09:30:34 +02:00