]> git.ipfire.org Git - thirdparty/linux.git/commit
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
authorJason Gunthorpe <jgg@nvidia.com>
Tue, 16 Dec 2025 15:53:40 +0000 (11:53 -0400)
committerJason Gunthorpe <jgg@nvidia.com>
Tue, 16 Dec 2025 15:53:40 +0000 (11:53 -0400)
commite6a973af11135439de32ece3b9cbe3bfc043bea8
tree51fccb4649a80f9c0f9693ca8fd2e0dc5744366f
parentb80fab281349f107a07e841eb412a86e2877ae88
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

syzkaller found it could overflow math in the test infrastructure and
cause a WARN_ON by corrupting the reserved interval tree. This only
effects test kernels with CONFIG_IOMMUFD_TEST.

Validate the user input length in the test ioctl.

Fixes: f4b20bb34c83 ("iommufd: Add kernel support for testing iommufd")
Link: https://patch.msgid.link/r/0-v1-cd99f6049ba5+51-iommufd_syz_add_resv_jgg@nvidia.com
Reviewed-by: Samiullah Khawaja <skhawaja@google.com>
Reviewed-by: Kevin Tian <kevin.tian@intel.com>
Tested-by: Yi Liu <yi.l.liu@intel.com>
Reported-by: syzbot+57fdb0cf6a0c5d1f15a2@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/all/69368129.a70a0220.38f243.008f.GAE@google.com
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
drivers/iommu/iommufd/selftest.c