iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/block
History
Christian A. Ehrhardt 0f1bae071d block: Fix WARNING in _copy_from_iter 
[ Upstream commit 13f3956eb5681a4045a8dfdef48df5dc4d9f58a6 ]

Syzkaller reports a warning in _copy_from_iter because an
iov_iter is supposedly used in the wrong direction. The reason
is that syzcaller managed to generate a request with
a transfer direction of SG_DXFER_TO_FROM_DEV. This instructs
the kernel to copy user buffers into the kernel, read into
the copied buffers and then copy the data back to user space.

Thus the iovec is used in both directions.

Detect this situation in the block layer and construct a new
iterator with the correct direction for the copy-in.

Reported-by: syzbot+a532b03fdfee2c137666@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/lkml/0000000000009b92c10604d7a5e9@google.com/t/
Reported-by: syzbot+63dec323ac56c28e644f@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/lkml/0000000000003faaa105f6e7c658@google.com/T/
Signed-off-by: Christian A. Ehrhardt <lk@c--e.de>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Link: https://lore.kernel.org/r/20240121202634.275068-1-lk@c--e.de
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-03-01 13:34:49 +01:00
..
partitions
block: Move checking GENHD_FL_NO_PART to bdev_add_partition()
2024-01-31 16:19:12 -08:00
badblocks.c
block/badblocks: Remove redundant assignments
2022-04-23 07:15:26 -06:00
bdev.c
block: update the stable_writes flag in bdev_add
2023-12-03 07:33:03 +01:00
bfq-cgroup.c
blkcg: Restructure blkg_conf_prep() and friends
2023-04-13 06:46:49 -06:00
bfq-iosched.c
SCSI misc on 20230629
2023-06-30 11:57:07 -07:00
bfq-iosched.h
block, bfq: remove BFQ_WEIGHT_LEGACY_DFL
2023-04-06 16:17:32 -06:00
bfq-wf2q.c
block, bfq: inject I/O to underutilized actuators
2023-01-29 15:18:33 -07:00
bio-integrity.c
bio-integrity: create multi-page bvecs in bio_integrity_add_page()
2023-08-09 16:05:35 -06:00
bio.c
block: prevent an integer overflow in bvec_try_merge_hw_page
2024-02-05 20:14:24 +00:00
blk-cgroup-fc-appid.c
block: Replace all non-returning strlcpy with strscpy
2023-06-01 09:13:31 -06:00
blk-cgroup-rwstat.c
Revert "blk-cgroup: pin the gendisk in struct blkcg_gq"
2023-02-14 14:24:09 -07:00
blk-cgroup-rwstat.h
block: Use the new blk_opf_t type
2022-07-14 12:14:30 -06:00
blk-cgroup.c
blk-cgroup: bypass blkcg_deactivate_policy after destroying
2023-12-20 17:01:55 +01:00
blk-cgroup.h
blk-cgroup: fix rcu lockdep warning in blkg_lookup()
2024-01-25 15:35:30 -08:00
blk-core.c
block: warn once for each partition in bio_check_ro()
2024-01-20 11:51:38 +01:00
blk-crypto-fallback.c
blk-crypto: dynamically allocate fallback profile
2023-08-18 15:00:39 -06:00
blk-crypto-internal.h
blk-crypto: remove blk_crypto_insert_cloned_request()
2023-03-16 09:35:09 -06:00
blk-crypto-profile.c
blk-crypto: use dynamic lock class for blk_crypto_profile::lock
2023-07-05 16:36:12 -06:00
blk-crypto-sysfs.c
block: make kobj_type structures constant
2023-02-09 09:38:16 -07:00
blk-crypto.c
blk-crypto: make blk_crypto_evict_key() more robust
2023-03-16 09:35:09 -06:00
blk-flush.c
blk-flush: reuse rq queuelist in flush state machine
2023-07-17 08:18:21 -06:00
blk-ia-ranges.c
block: make kobj_type structures constant
2023-02-09 09:38:16 -07:00
blk-integrity.c
blk-integrity: register sysfs attributes on struct device
2023-04-26 18:22:50 -06:00
blk-ioc.c
blk-ioc: fix recursive spin_lock/unlock_irq() in ioc_clear_queue()
2023-06-07 07:51:00 -06:00
blk-iocost.c
blk-iocost: Fix an UBSAN shift-out-of-bounds warning
2024-02-16 19:10:53 +01:00
blk-iolatency.c
block: fix bad lockdep annotation in blk-iolatency
2023-08-10 17:24:53 -06:00
blk-ioprio.c
blk-ioprio: Introduce promote-to-rt policy
2023-06-06 22:26:26 -06:00
blk-ioprio.h
blk-ioprio: pass a gendisk to blk_ioprio_init and blk_ioprio_exit
2022-09-26 19:09:31 -06:00
blk-lib.c
blk-lib: fix blkdev_issue_secure_erase
2022-09-15 00:25:17 -06:00
blk-map.c
block: Fix WARNING in _copy_from_iter
2024-03-01 13:34:49 +01:00
blk-merge.c
blk-mq: release crypto keyslot before reporting I/O complete
2023-03-16 09:35:09 -06:00
blk-mq-cpumap.c
blk-mq: include <linux/blk-mq.h> in block/blk-mq.h
2023-04-13 06:52:29 -06:00
blk-mq-debugfs-zoned.c
block: move zone related fields to struct gendisk
2022-07-06 06:46:26 -06:00
blk-mq-debugfs.c
blk-mq: fix potential io hang by wrong 'wake_batch'
2023-06-12 09:55:53 -06:00
blk-mq-debugfs.h
block: remove per-disk debugfs files in blk_unregister_queue
2022-06-17 07:31:05 -06:00
blk-mq-pci.c
blk-mq: include <linux/blk-mq.h> in block/blk-mq.h
2023-04-13 06:52:29 -06:00
blk-mq-sched.c
blk-mq: cleanup __blk_mq_sched_dispatch_requests
2023-04-13 06:57:18 -06:00
blk-mq-sched.h
blk-mq: make sure elevator callbacks aren't called for passthrough request
2023-05-18 19:42:54 -06:00
blk-mq-sysfs.c
blk-mq: include <linux/blk-mq.h> in block/blk-mq.h
2023-04-13 06:52:29 -06:00
blk-mq-tag.c
for-6.5/block-2023-06-23
2023-06-26 12:47:20 -07:00
blk-mq-virtio.c
blk-mq: include <linux/blk-mq.h> in block/blk-mq.h
2023-04-13 06:52:29 -06:00
blk-mq.c
block: fix partial zone append completion handling in req_bio_endio()
2024-02-23 09:25:18 +01:00
blk-mq.h
blk-mq: fix potential io hang by wrong 'wake_batch'
2023-06-12 09:55:53 -06:00
blk-pm.c
blk-mq: include <linux/blk-mq.h> in block/blk-mq.h
2023-04-13 06:52:29 -06:00
blk-pm.h
block: Remove unused blk_pm_*() function definitions
2021-02-22 06:33:48 -07:00
blk-rq-qos.c
block: correct stale comment in rq_qos_wait
2023-09-18 14:15:28 -06:00
blk-rq-qos.h
blk-iolatency: s/blkcg_rq_qos/iolat_rq_qos/
2023-04-13 06:46:49 -06:00
blk-settings.c
block: don't allow enabling a cache on devices that don't support it
2023-07-17 08:18:18 -06:00
blk-stat.c
blk-mq: include <linux/blk-mq.h> in block/blk-mq.h
2023-04-13 06:52:29 -06:00
blk-stat.h
block: make queue stat accounting a reference
2021-12-14 17:23:05 -07:00
blk-sysfs.c
block: don't allow enabling a cache on devices that don't support it
2023-07-17 08:18:18 -06:00
blk-throttle.c
blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!"
2023-12-20 17:01:55 +01:00
blk-throttle.h
blk-throttle: print signed value 'carryover_bytes/ios' for user
2023-08-30 10:15:01 -06:00
blk-timeout.c
block: blk-timeout: delete duplicated word
2020-07-31 16:29:47 -06:00
blk-wbt.c
blk-wbt: Fix detection of dirty-throttled tasks
2024-02-23 09:25:16 +01:00
blk-wbt.h
blk-wbt: don't create wbt sysfs entry if CONFIG_BLK_WBT is disabled
2023-06-26 09:53:36 -06:00
blk-zoned.c
Merge branch '6.5/scsi-staging' into 6.5/scsi-fixes
2023-07-11 12:15:15 -04:00
blk.h
block: Add some exports for bcachefs
2023-08-14 15:40:42 -06:00
bounce.c
block: change the blk_queue_bounce calling convention
2022-08-02 17:22:54 -06:00
bsg-lib.c
scsi: replace the fmode_t argument to ->sg_io_fn with a simple bool
2023-06-12 08:04:04 -06:00
bsg.c
SCSI misc on 20230629
2023-06-30 11:57:07 -07:00
disk-events.c
block: fix kernel-doc for disk_force_media_change()
2023-09-26 00:43:34 -06:00
early-lookup.c
block: don't return -EINVAL for not found names in devt_from_devname
2023-06-22 09:09:33 -06:00
elevator.c
blk-mq: release scheduler resource when request completes
2023-08-19 07:47:17 -06:00
elevator.h
blk-mq: pass a flags argument to elevator_type->insert_requests
2023-04-13 06:52:30 -06:00
fops.c
block: Don't invalidate pagecache for invalid falloc modes
2023-10-11 15:53:17 -06:00
genhd.c
block: add check of 'minors' and 'first_minor' in device_add_disk()
2024-01-25 15:35:27 -08:00
holder.c
block: don't allow a disk link holder to itself
2022-11-16 15:19:56 -07:00
ioctl.c
block: Move checking GENHD_FL_NO_PART to bdev_add_partition()
2024-01-31 16:19:12 -08:00
ioprio.c
scsi: block: Improve ioprio value validity checks
2023-06-16 12:04:30 -04:00
Kconfig
block: sed-opal: keyring support for SED keys
2023-08-22 11:10:26 -06:00
Kconfig.iosched
block: Default to use cgroup support for BFQ
2023-01-30 09:42:42 -07:00
kyber-iosched.c
blk-mq: pass a flags argument to elevator_type->insert_requests
2023-04-13 06:52:30 -06:00
Makefile
block: move the code to do early boot lookup of block devices to block/
2023-06-05 10:57:40 -06:00
mq-deadline.c
block/mq-deadline: use correct way to throttling write requests
2023-08-08 15:46:41 -06:00
opal_proto.h
block: sed-opal: Implement IOC_OPAL_REVERT_LSP
2023-08-22 11:10:26 -06:00
sed-opal.c
block: Fix regression in sed-opal for a saved key.
2023-10-13 08:16:08 -06:00
t10-pi.c
block: add pi for extended integrity
2022-03-07 12:48:35 -07:00