[RFC PATCH 0/3] hw/audio/intel-hda: Restrict DMA engine to memories (non-MMIO devices)

Philippe Mathieu-Daudé posted 3 patches 2 years, 4 months ago
Test checkpatch passed
Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/qemu tags/patchew/20211218160912.1591633-1-philmd@redhat.com
Maintainers: Gerd Hoffmann <kraxel@redhat.com>, Thomas Huth <thuth@redhat.com>, Laurent Vivier <lvivier@redhat.com>, Paolo Bonzini <pbonzini@redhat.com>
hw/audio/intel-hda.c         | 11 ++++++++---
tests/qtest/intel-hda-test.c | 34 ++++++++++++++++++++++++++++++++++
2 files changed, 42 insertions(+), 3 deletions(-)
[RFC PATCH 0/3] hw/audio/intel-hda: Restrict DMA engine to memories (non-MMIO devices)
Posted by Philippe Mathieu-Daudé 2 years, 4 months ago
An attempt to fix the Intel HDA DMA reentrancy problem by
restricting the DMA engine to memories, and reporting invalid
I/O region accesses as overruns.

Based-on: <20211218151053.1545962-1-philmd@redhat.com>
"hw: Have DMA API take MemTxAttrs arg & propagate MemTxResult (part 4)"
https://lore.kernel.org/qemu-devel/20211218151053.1545962-1-philmd@redhat.com/

Philippe Mathieu-Daudé (3):
  hw/audio/intel-hda: Do not ignore DMA overrun errors
  hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices)
  tests/qtest/intel-hda-test: Add reproducer for issue #542

 hw/audio/intel-hda.c         | 11 ++++++++---
 tests/qtest/intel-hda-test.c | 34 ++++++++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+), 3 deletions(-)

-- 
2.33.1


Re: [RFC PATCH 0/3] hw/audio/intel-hda: Restrict DMA engine to memories (CVE-2021-3611)
Posted by Philippe Mathieu-Daudé 2 years, 4 months ago
On 12/18/21 17:09, Philippe Mathieu-Daudé wrote:
> An attempt to fix the Intel HDA DMA reentrancy problem by
> restricting the DMA engine to memories, and reporting invalid
> I/O region accesses as overruns.

Eh reading again the gitlab issue I realized CVE-2021-3611 has
been assigned for this.