swiotlb-xen: fix DMA_ATTR_NO_KERNEL_MAPPING on arm
authorChristoph Hellwig <hch@lst.de>
Fri, 22 Apr 2022 04:37:57 +0000 (06:37 +0200)
committerChristoph Hellwig <hch@lst.de>
Wed, 11 May 2022 17:48:32 +0000 (19:48 +0200)
commit566fb90e050dfa2132340bbdab9533b727dda6f1
tree04e47ee8436c65cf9a85cfa8a84e866a93ec2f12
parent3cb4503a330159dc5cf2f8382181ccbabbbaa5b2
swiotlb-xen: fix DMA_ATTR_NO_KERNEL_MAPPING on arm

swiotlb-xen uses very different ways to allocate coherent memory on x86
vs arm.  On the former it allocates memory from the page allocator, while
on the later it reuses the dma-direct allocator the handles the
complexities of non-coherent DMA on arm platforms.

Unfortunately the complexities of trying to deal with the two cases in
the swiotlb-xen.c code lead to a bug in the handling of
DMA_ATTR_NO_KERNEL_MAPPING on arm.  With the DMA_ATTR_NO_KERNEL_MAPPING
flag the coherent memory allocator does not actually allocate coherent
memory, but just a DMA handle for some memory that is DMA addressable
by the device, but which does not have to have a kernel mapping.  Thus
dereferencing the return value will lead to kernel crashed and memory
corruption.

Fix this by using the dma-direct allocator directly for arm, which works
perfectly fine because on arm swiotlb-xen is only used when the domain is
1:1 mapped, and then simplifying the remaining code to only cater for the
x86 case with DMA coherent device.

Reported-by: Rahul Singh <Rahul.Singh@arm.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Rahul Singh <rahul.singh@arm.com>
Reviewed-by: Stefano Stabellini <sstabellini@kernel.org>
Tested-by: Rahul Singh <rahul.singh@arm.com>
arch/arm/include/asm/xen/page-coherent.h [deleted file]
arch/arm/xen/mm.c
arch/arm64/include/asm/xen/page-coherent.h [deleted file]
arch/x86/include/asm/xen/page-coherent.h [deleted file]
arch/x86/include/asm/xen/swiotlb-xen.h
arch/x86/xen/mmu_pv.c
drivers/xen/swiotlb-xen.c
include/xen/arm/page-coherent.h [deleted file]
include/xen/swiotlb-xen.h
include/xen/xen-ops.h