• Nicolas Saenz Julienne's avatar
    dma-direct: check for overflows on 32 bit DMA addresses · b12d6627
    Nicolas Saenz Julienne authored
    As seen on the new Raspberry Pi 4 and sta2x11's DMA implementation it is
    possible for a device configured with 32 bit DMA addresses and a partial
    DMA mapping located at the end of the address space to overflow. It
    happens when a higher physical address, not DMAable, is translated to
    it's DMA counterpart.
    
    For example the Raspberry Pi 4, configurable up to 4 GB of memory, has
    an interconnect capable of addressing the lower 1 GB of physical memory
    with a DMA offset of 0xc0000000. It transpires that, any attempt to
    translate physical addresses higher than the first GB will result in an
    overflow which dma_capable() can't detect as it only checks for
    addresses bigger then the maximum allowed DMA address.
    
    Fix this by verifying in dma_capable() if the DMA address range provided
    is at any point lower than the minimum possible DMA address on the bus.
    Signed-off-by: default avatarNicolas Saenz Julienne <nsaenzjulienne@suse.de>
    Signed-off-by: default avatarChristoph Hellwig <hch@lst.de>
    b12d6627
dma-direct.h 2.91 KB