From nobody Tue Sep 29 04:39:03 2026 Received: from CO1PR03CU002.outbound.protection.outlook.com (mail-westus2azon11010057.outbound.protection.outlook.com [52.101.46.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DFE57435502; Wed, 12 Aug 2026 11:21:26 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.46.57 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533688; cv=fail; b=lTZKF+2Iybsl6wxA5gppGXdRzmiREGkJzVPb7eV1ZDRP+fBVepRfCuXSciQk0cLvvJ2ODo0HL8fKcA4jwVwEtT6FW/7Sy5LLF8hgmbLYGyO2maogDyw6fk4QuunEN5dsRfde/wU+TVZnkz5IVZR5Tl3Pn29m1AC5myIE8pQsSP4= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533688; c=relaxed/simple; bh=BVHR0ufqrKrSKizVnep+oJsuiGwJAHGQmYpy1ObZEGI=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=Qm4VJcNpcQ7RglujEgjQ2Oq36Wp46ahsKAETgh7LXsYcQ1tw3RpYSH3c9rUjF//tCF0c9tWFcL64lg4yTXwi0QOcU/UPAmV2VwH/WKKGaY4KDvGLFbok4K1dujWQyyHGeTYsmA9UQ74lodjkNeXLpkmyurwor9nLASKwbhz0B4g= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=bzBob6a4; arc=fail smtp.client-ip=52.101.46.57 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="bzBob6a4" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=CWjT4fi5NJ3AlpyMcThPztxUBfwKForBJt58GPSVtw7+kuD8tbgwpD2Fc+ReNt9ntrHMg8nZm6sSzcmr3BwfegMWRuVo81C27MDba9LFleDkNKc/D8c6STLt7Nxra4W3Uu7Cde57VKKydQnUuq7aBK1+l3QqFv0zfCzppw4/wmiZWkowLevHtO62PE8fzgLmu5zXox4ordfosu5ubsEBJAF0lUV8cb025mxJCQRs5g5pyGNKuRqF/kVb+ROZ/eEZNZQ+c8BaHKSnzXEErL3q93hjAN4XFSxOWFAEHJbJsKCo2FqxSuEMFOq8N1uW6w5ybk2QEaAVJL7J5IJBI1gEAg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yPX0hP0cTHccGMcHn8PQ0Bo8SsfahFdlJ3t+MPc9+rs=; b=nhkGOfi+m/EE/aRJ3d1heTAcSr2vRp1jgVhM3qNgsQqxUlKX7KNuTlkeanwoQzoBd/fNwLl8Au3aq8I+uOwWVhPkgFIl0BLW018EBZrN7BxfL0qWz8RDJFsU9KJySgjhmow+NgusejQhkzkBFXl3Mvg6Wm1zUeoBNugtkvzl/HS3X5yU13isghEypBBorOlpKwFlejgV7X4bUlK4sW2l5siePgsbv8SFOBhQR41uwtEMvLuRjA8ycuaAP92hPeyrcEfMSiBQmUZ3IqZcNxWc5aRSjpz452s3jYYVDqUjZBUYa7SAkFm5CKZu1HDy+SvXOkCXsdLsbvajVpucTBey6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yPX0hP0cTHccGMcHn8PQ0Bo8SsfahFdlJ3t+MPc9+rs=; b=bzBob6a4zy7Ys5hgDONa5w72HReNXuQMVRKYPH654Cmx4gew5KYcj2v1dzokjlJBAW95lVroM1xMoPd8/aFFzTnJEZJrGphKYsOChcJzHJnXOcIaZp+4t9jlN6qonsyYiLPscUPr83NUJs4Dy7RHE6L9/4zubQ53UkxeIFQLcmAf3jXyeb2d0grlzdpJrW/hoRXG1YD0VG6qE2Qep3j0D4mSuUdw1LLzOz7BzInWjush1W2A+Dp572k17bru6xX4rhPzw0zB+axGp8dm92HhCRfL86n/wh9iq/EKsvJpBaF0Z5XEp8LakHstFseLhbMaT0gWc4VZKepEf5hVqfmcdA== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) by DS4PR12MB9748.namprd12.prod.outlook.com (2603:10b6:8:29e::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Wed, 12 Aug 2026 11:21:23 +0000 Received: from BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8]) by BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8%5]) with mapi id 15.21.0292.024; Wed, 12 Aug 2026 11:21:23 +0000 From: Richard Cheng To: dave@stgolabs.net, jic23@kernel.org, dave.jiang@intel.com, alison.schofield@intel.com, vishal.l.verma@intel.com Cc: iweiny@kernel.org, ming.li@zohomail.com, gourry@gourry.net, rrichter@amd.com, linux-cxl@vger.kernel.org, linux-kernel@vger.kernel.org, kees@kernel.org, newtonl@nvidia.com, kristinc@nvidia.com, kaihengf@nvidia.com, kobak@nvidia.com, Richard Cheng Subject: [PATCH v4 1/6] cxl/features: Reject feature offset that overflows 16-bit field Date: Wed, 12 Aug 2026 19:21:02 +0800 Message-ID: <20260812112107.56181-2-icheng@nvidia.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260812112107.56181-1-icheng@nvidia.com> References: <20260812112107.56181-1-icheng@nvidia.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: KUZPR03CA0010.apcprd03.prod.outlook.com (2603:1096:d10:2a::12) To BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL0PR12MB2370:EE_|DS4PR12MB9748:EE_ X-MS-Office365-Filtering-Correlation-Id: ab40478f-bad2-4fe0-9710-08def863d6ef X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|7416014|366016|10067099003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR12MB2370.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(7416014)(366016)(10067099003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?f6CsA369p1llDmb7eAqcRXwbun+6sSzU6KbSkYOTK6RIORT7kqVGwZZf2+ff?= =?us-ascii?Q?2GX0BH2rJKhRlK0yhAMuPFEli/Lw4JhK1B7a+lELfE3wmRbP0S1sstk5F6IX?= =?us-ascii?Q?YEhUFRwZqkYCsdxHJ1wZ6zsjPf1JbhZ+fPT/MMAAvOKcgF87Xec+bDpTepRs?= =?us-ascii?Q?29FhHfwdWooAL3M7IvBHvNBDUkn7e0mKKtny1M0iNAdq182jgbqwCNkUAZ31?= =?us-ascii?Q?FvEelpyqC7lgaae67ymefyqXDyWfH8WEcDhNMYy9nUrkpBVpemM51euhDTaC?= =?us-ascii?Q?QhRW3PDEzSg79nk2HAX4a6r6cAys46gm2Vp/EgAn+1c5yLhA+t2/7NblisJS?= =?us-ascii?Q?SDTnzudASP8AHKESiKuV8NYKZnS1KRszvX/EakWo91MNySE2QepSop3ZAoH+?= =?us-ascii?Q?5l6d8+Sax01I+ieKT0JTe3BzHWYnCn3Blh4KXvn500QcshQJPyf4x6MpKzT7?= =?us-ascii?Q?qNa0M/UMht4I2y6enN6HiLpa1b1pkkpNL97uDNdU4/u/PoNStrapUP9ldKik?= =?us-ascii?Q?nUylJz5k5OodfvvGk6Fa1xX5oGUexuKeKL23q3OT9hsKikO6pSYCODp0L/iD?= =?us-ascii?Q?hYLEtJrnUH5SnBq9uN7/lLHtqRUAtT3W1IbCXSGpXYXOG8i3KBNBZxJlzQoK?= =?us-ascii?Q?IxOY1WoyVUow9C/6i08s2lT+LqAlVCTXwnNDaPKhIq4Kip+cfr88aDZVCUC6?= =?us-ascii?Q?XdQjxEVTmmhy8ISfan2xM/ocDCzgu59RGWGUZzdhEeBN8aQSrihBkL0SRAAu?= =?us-ascii?Q?9+R5JRL1F+oPvKdsvcd5b9whrg0NGeGdhP5hiDe4Y4axPRYg/JGbj5p1UI7I?= =?us-ascii?Q?ouaxu+oN6ig4DKmpn95CXscFJW4gI7VCNiMEUMSdU5/9tPHwtg+/l2OrzOaE?= =?us-ascii?Q?M5gahFAIlvY3dbZ+/6P5uOrhzY+cTwIGo+KHS367g3ZA27OmkujvRJJS3XaB?= =?us-ascii?Q?G+ybr2dNx9uCV9y/wjDYBSaHI6kIJkkEczW6fWshNyeiIu9wXklq4jmXjcZA?= =?us-ascii?Q?6l2n9kI8c4uZFwmw0YVclOQsvndyPG0jDnUpougMswuDADy17bkp6UxUPB9H?= =?us-ascii?Q?qKnRPQLEzmQMrTISyK3r3bXqVRuAInNH7/dFp2fYJHAVWfCpwbnJ0s+tzZgU?= =?us-ascii?Q?f/P+IFA0gpessJIZjkqVfPi/gP5cUNYWl8/Qz+Fr5TGSMCodWdVBxoVEa1w4?= =?us-ascii?Q?uL5JxUmIH/uJ37FFC2skEPgYLseDWsVqhpo0NeZhGvZO/lVap+jRyDoTZVSc?= =?us-ascii?Q?IASreKjra/srvmcCMLOC4iC0IYOkHj7FFbZg3+rqUmkX4XzSXSSGzFHOvyyM?= =?us-ascii?Q?sK6JWJi4zxHgIwOczaNur1YrB5N0J1COMfV/lLnCHboGUeuHCBdi+DsuEd4H?= =?us-ascii?Q?UKwni+DDPGeWbuWFWABNR1m0LWBQlrr9FNoUolaFD4NAqDgFfisv+TwrBi85?= =?us-ascii?Q?nTmZpSwihjsgQhM4fRECsfu1NPFEKHzJLGQI1BoVHJ4bK7yP/+nBDTNkresD?= =?us-ascii?Q?dV2mnDQ9W9SIo9X2y96PvIIC16giSKa/URQ9VLCh6yEKf6OehrnzCqGM8EZD?= =?us-ascii?Q?DnY8OfLFCwMk6CwsGIZb8E24tQnOR91cpwh3EQt8y5ruVharuL8n414k0DI+?= =?us-ascii?Q?9xurMv5SFJOLzxXyZcsedb7RjXbMNQec7ZCToIDaVEbKVXVupF04lKjjlzf7?= =?us-ascii?Q?NGs1CM9wToX4cR+FReUfa1tcUQo+xt/KtYok26baM1WWVAklwrlL7EHzFQz6?= =?us-ascii?Q?CoAQxhOZ8A=3D=3D?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: ab40478f-bad2-4fe0-9710-08def863d6ef X-MS-Exchange-CrossTenant-AuthSource: BL0PR12MB2370.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 11:21:23.1685 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 7JXWbMLLtNq0Qg9KXHoToJvbF+nar1RxYqinVPqpolVx3nmk/vQvz8rf3omj6TkhtADYMvVl4iP0/Aics2cXjA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR12MB9748 Content-Type: text/plain; charset="utf-8" cxl_get_feature() and cxl_set_feature() build each mailbox command's offset from the starting offset plus the amount of data already transferred, then store it in a 16-bit field. A user-controlled fwctl offset and transfer size can exceed the feature extent, allowing a later offset to be truncated by cpu_to_le16() and target the wrong feature data. Reject requests whose transfer size exceeds the remaining 16-bit feature range. Express the check as "size > U16_MAX - offset" so the validation itself cannot wrap on 32-bit systems. Change cxl_get_feature() to return ssize_t so invalid input and mailbox failures are reported as negative errno rather than being conflated with a zero-byte result. Update the EDAC callers to handle negative results. Keep fwctl behavior unchanged by translating helper failures to the same header-only RPC response carrying the CXL mailbox return code. Fixes: 5e5ac21f629d ("cxl/mbox: Add GET_FEATURE mailbox command") Fixes: 14d502cc2718 ("cxl/mbox: Add SET_FEATURE mailbox command") Signed-off-by: Richard Cheng --- drivers/cxl/core/core.h | 8 ++++---- drivers/cxl/core/edac.c | 20 +++++++++++++++----- drivers/cxl/core/features.c | 28 ++++++++++++++++++---------- 3 files changed, 37 insertions(+), 19 deletions(-) diff --git a/drivers/cxl/core/core.h b/drivers/cxl/core/core.h index 35eaf636adc9..bb380ec6daeb 100644 --- a/drivers/cxl/core/core.h +++ b/drivers/cxl/core/core.h @@ -217,10 +217,10 @@ int cxl_port_get_possible_dports(struct cxl_port *por= t); #ifdef CONFIG_CXL_FEATURES struct cxl_feat_entry * cxl_feature_info(struct cxl_features_state *cxlfs, const uuid_t *uuid); -size_t cxl_get_feature(struct cxl_mailbox *cxl_mbox, const uuid_t *feat_uu= id, - enum cxl_get_feat_selection selection, - void *feat_out, size_t feat_out_size, u16 offset, - u16 *return_code); +ssize_t cxl_get_feature(struct cxl_mailbox *cxl_mbox, const uuid_t *feat_u= uid, + enum cxl_get_feat_selection selection, + void *feat_out, size_t feat_out_size, u16 offset, + u16 *return_code); int cxl_set_feature(struct cxl_mailbox *cxl_mbox, const uuid_t *feat_uuid, u8 feat_version, const void *feat_data, size_t feat_data_size, u32 feat_flag, u16 offset, diff --git a/drivers/cxl/core/edac.c b/drivers/cxl/core/edac.c index b321971fef58..f1df4b5cfe5b 100644 --- a/drivers/cxl/core/edac.c +++ b/drivers/cxl/core/edac.c @@ -78,7 +78,7 @@ static int cxl_mem_scrub_get_attrbs(struct cxl_mailbox *c= xl_mbox, u8 *cap, u16 *cycle, u8 *flags, u8 *min_cycle) { size_t rd_data_size =3D sizeof(struct cxl_scrub_rd_attrbs); - size_t data_size; + ssize_t data_size; struct cxl_scrub_rd_attrbs *rd_attrbs __free(kfree) =3D kzalloc(rd_data_size, GFP_KERNEL); if (!rd_attrbs) @@ -87,6 +87,8 @@ static int cxl_mem_scrub_get_attrbs(struct cxl_mailbox *c= xl_mbox, u8 *cap, data_size =3D cxl_get_feature(cxl_mbox, &CXL_FEAT_PATROL_SCRUB_UUID, CXL_GET_FEAT_SEL_CURRENT_VALUE, rd_attrbs, rd_data_size, 0, NULL); + if (data_size < 0) + return data_size; if (!data_size) return -EIO; =20 @@ -551,7 +553,7 @@ static int cxl_mem_ecs_get_attrbs(struct device *dev, struct cxl_mailbox *cxl_mbox =3D &cxlmd->cxlds->cxl_mbox; struct cxl_ecs_fru_rd_attrbs *fru_rd_attrbs; size_t rd_data_size; - size_t data_size; + ssize_t data_size; =20 rd_data_size =3D cxl_ecs_ctx->get_feat_size; =20 @@ -563,6 +565,8 @@ static int cxl_mem_ecs_get_attrbs(struct device *dev, data_size =3D cxl_get_feature(cxl_mbox, &CXL_FEAT_ECS_UUID, CXL_GET_FEAT_SEL_CURRENT_VALUE, rd_attrbs, rd_data_size, 0, NULL); + if (data_size < 0) + return data_size; if (!data_size) return -EIO; =20 @@ -583,7 +587,7 @@ static int cxl_mem_ecs_set_attrbs(struct device *dev, struct cxl_ecs_fru_wr_attrbs *fru_wr_attrbs; size_t rd_data_size, wr_data_size; u16 num_media_frus, count; - size_t data_size; + ssize_t data_size; =20 num_media_frus =3D cxl_ecs_ctx->num_media_frus; rd_data_size =3D cxl_ecs_ctx->get_feat_size; @@ -596,6 +600,8 @@ static int cxl_mem_ecs_set_attrbs(struct device *dev, data_size =3D cxl_get_feature(cxl_mbox, &CXL_FEAT_ECS_UUID, CXL_GET_FEAT_SEL_CURRENT_VALUE, rd_attrbs, rd_data_size, 0, NULL); + if (data_size < 0) + return data_size; if (!data_size) return -EIO; =20 @@ -1264,7 +1270,7 @@ cxl_mem_sparing_get_attrbs(struct cxl_mem_sparing_con= text *cxl_sparing_ctx) struct cxl_memdev *cxlmd =3D cxl_sparing_ctx->cxlmd; struct cxl_mailbox *cxl_mbox =3D &cxlmd->cxlds->cxl_mbox; u16 restriction_flags; - size_t data_size; + ssize_t data_size; u16 return_code; struct cxl_memdev_sparing_rd_attrbs *rd_attrbs __free(kfree) =3D kzalloc(rd_data_size, GFP_KERNEL); @@ -1274,6 +1280,8 @@ cxl_mem_sparing_get_attrbs(struct cxl_mem_sparing_con= text *cxl_sparing_ctx) data_size =3D cxl_get_feature(cxl_mbox, &cxl_sparing_ctx->repair_uuid, CXL_GET_FEAT_SEL_CURRENT_VALUE, rd_attrbs, rd_data_size, 0, &return_code); + if (data_size < 0) + return data_size; if (!data_size) return -EIO; =20 @@ -1750,7 +1758,7 @@ static int cxl_mem_ppr_get_attrbs(struct cxl_ppr_cont= ext *cxl_ppr_ctx) struct cxl_memdev *cxlmd =3D cxl_ppr_ctx->cxlmd; struct cxl_mailbox *cxl_mbox =3D &cxlmd->cxlds->cxl_mbox; u16 restriction_flags; - size_t data_size; + ssize_t data_size; u16 return_code; =20 struct cxl_memdev_ppr_rd_attrbs *rd_attrbs __free(kfree) =3D @@ -1761,6 +1769,8 @@ static int cxl_mem_ppr_get_attrbs(struct cxl_ppr_cont= ext *cxl_ppr_ctx) data_size =3D cxl_get_feature(cxl_mbox, &cxl_ppr_ctx->repair_uuid, CXL_GET_FEAT_SEL_CURRENT_VALUE, rd_attrbs, rd_data_size, 0, &return_code); + if (data_size < 0) + return data_size; if (!data_size) return -EIO; =20 diff --git a/drivers/cxl/core/features.c b/drivers/cxl/core/features.c index ba6d2a5acb74..8d44ce829497 100644 --- a/drivers/cxl/core/features.c +++ b/drivers/cxl/core/features.c @@ -220,10 +220,10 @@ int devm_cxl_setup_features(struct cxl_dev_state *cxl= ds) } EXPORT_SYMBOL_NS_GPL(devm_cxl_setup_features, "CXL"); =20 -size_t cxl_get_feature(struct cxl_mailbox *cxl_mbox, const uuid_t *feat_uu= id, - enum cxl_get_feat_selection selection, - void *feat_out, size_t feat_out_size, u16 offset, - u16 *return_code) +ssize_t cxl_get_feature(struct cxl_mailbox *cxl_mbox, const uuid_t *feat_u= uid, + enum cxl_get_feat_selection selection, + void *feat_out, size_t feat_out_size, u16 offset, + u16 *return_code) { size_t data_to_rd_size; struct cxl_mbox_get_feat_in pi; @@ -235,7 +235,10 @@ size_t cxl_get_feature(struct cxl_mailbox *cxl_mbox, c= onst uuid_t *feat_uuid, *return_code =3D CXL_MBOX_CMD_RC_INPUT; =20 if (!feat_out || !feat_out_size) - return 0; + return -EINVAL; + + if (feat_out_size > U16_MAX - offset) + return -EINVAL; =20 uuid_copy(&pi.uuid, feat_uuid); pi.selection =3D selection; @@ -259,7 +262,7 @@ size_t cxl_get_feature(struct cxl_mailbox *cxl_mbox, co= nst uuid_t *feat_uuid, if (rc < 0 || !mbox_cmd.size_out) { if (return_code) *return_code =3D mbox_cmd.return_code; - return 0; + return rc < 0 ? rc : -EIO; } data_rcvd_size +=3D mbox_cmd.size_out; } while (data_rcvd_size < feat_out_size); @@ -288,6 +291,9 @@ int cxl_set_feature(struct cxl_mailbox *cxl_mbox, if (return_code) *return_code =3D CXL_MBOX_CMD_RC_INPUT; =20 + if (feat_data_size > U16_MAX - offset) + return -EINVAL; + struct cxl_mbox_set_feat_in *pi __free(kfree) =3D kzalloc(cxl_mbox->payload_size, GFP_KERNEL); if (!pi) @@ -462,6 +468,7 @@ static void *cxlctl_get_feature(struct cxl_features_sta= te *cxlfs, const struct cxl_mbox_get_feat_in *feat_in; u16 offset, count, return_code; size_t out_size =3D *out_len; + ssize_t data_size; =20 if (rpc_in->op_size !=3D sizeof(*feat_in)) return ERR_PTR(-EINVAL); @@ -482,16 +489,17 @@ static void *cxlctl_get_feature(struct cxl_features_s= tate *cxlfs, if (!rpc_out) return ERR_PTR(-ENOMEM); =20 - out_size =3D cxl_get_feature(cxl_mbox, &feat_in->uuid, - feat_in->selection, rpc_out->payload, - count, offset, &return_code); + data_size =3D cxl_get_feature(cxl_mbox, &feat_in->uuid, + feat_in->selection, rpc_out->payload, + count, offset, &return_code); *out_len =3D sizeof(struct fwctl_rpc_cxl_out); - if (!out_size) { + if (data_size <=3D 0) { rpc_out->size =3D 0; rpc_out->retval =3D return_code; return no_free_ptr(rpc_out); } =20 + out_size =3D data_size; rpc_out->size =3D out_size; rpc_out->retval =3D CXL_MBOX_CMD_RC_SUCCESS; *out_len +=3D out_size; --=20 2.43.0 From nobody Tue Sep 29 04:39:03 2026 Received: from DM5PR21CU001.outbound.protection.outlook.com (mail-centralusazon11011008.outbound.protection.outlook.com [52.101.62.8]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1A0B7432E64; Wed, 12 Aug 2026 11:21:36 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.62.8 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533698; cv=fail; b=ZuWTeH2F97szCDe4zuwWC7RoWpN7rpxvjpslb8MUO3hupqOlYTsSvCi1KhxWw31QJU8hpktwHEh+iDCkoO9LE5eP98nAXfE4KpdJxLCy9ycTJY6os8YuNVGkchqPq1Fcq6kFmH2MQvPew8QG+VAtxwGH/MPaYqpEikgGQ5Lfmko= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533698; c=relaxed/simple; bh=aQtHP7Ze9GdkDxXl9K5JnPHmo+04QcH3/PQW65BMiBk=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=gRk6oeh1Tih9MIFTxPzoqzvkYuZvfK2HWH7gYUYkaQrfWVZXwZrIHtvtqkaXtTAXKahnrHsKKDX8ni0Ef/rFnr4nSXHc5O0xMJUXgB6UVtd9ekoyWNazFD6wRiAaARTkek7lMsyb3ZKK0/kONf0tNJlxqAAJcG7bcpAZpKfSTrk= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=lYOgf2x/; arc=fail smtp.client-ip=52.101.62.8 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="lYOgf2x/" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=u16Z2FPZjRhKMzWrJjJ3qM1MaxxYAwv5M57gB/EKCHTUzcUPlxFeWY43y9agPmMA5cFpMC+jOzXXN7SUwPplqpfPQs5AprAFlj89D0EAdij9Lk2uCuUFcASQ6J65mV8gFZxCjvUtxzKlwddjs99M2iB6eZ6R0CfRlLIkydc0cu1xDLvKEjIQlW4qRARocFtZF6cpH3xl/+PpbKwjaZK9PBykMqSRtYePw+SvpMPy70WVf0XjUOj1pKLR/4HaKGzXlt+xKfm3I6YnUScDW/Z3WZh0wYL9CNz2vHj+MabmvxjCjEiMN4XA/i6kO7NIeSWeSZ+yHdumVB6OPad2d4rElw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=St0FiUt+ChylOJEPrekuFWzTORS87e7QXIfNU2Fyjbc=; b=PGTPJIpl5WrphjM0KV6VCOMZ4iXqK2O2vgTegzQP7mwLLIsPX18UhzTjdQgpzKim2DoAfsGZa/B1YEcX9ypAGxUsLA7WHq0b+jqeHz5IXZ9F6Ruli70A0GllqP6QUBLGKdTTIKXAfU5vuspXaHGqb9G3+Hj2smdc8jOyg9WSremsmf2/QkYpEc74Bh40DpGtM6XDmT1APbapcs4jQL3pKmNNCuEhwUkTqiQNnu+DU7O+HN6AmjvuYw+g+fgayDpVldcUiQ/lHF7MpKo/x/JkVjySYYWX0GM5vMBNhNjZQYNELQCDEOI5raq5soHb3sBiYuSCVTjEyA6DWtap5O4HnQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=St0FiUt+ChylOJEPrekuFWzTORS87e7QXIfNU2Fyjbc=; b=lYOgf2x/g8ubwEcx/avOgeVHJVPuIaPaCA8i03GZdcX5qPfnMazjSEox0+68dEsp0c6z2jFB56KivQIkIFRz2HJH3kEXwZNwYPNwXZNKOm3hGBHUp1dWjeTbY+pV45xyG8CVyAG2nsYGCMdbeqChYq3ffz3JMU2LfeNxcuZ3ncJQvk6wyar5UrnQ+7l6QYmsF/WDLj4GPcJigGWfqS8VZhFXrBLhbLWdS/5+MBOLZhqMDCkldCxw7LDDJhURGkNpN07u5Qp0QfjkN4xatvx7OPQW1iMYsRFGUU2zIaiLnf8XOOX2Q4aeiYgkwIc624n1hXjmnE7SK4kf3dzQ3f5Kag== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) by DS4PR12MB9748.namprd12.prod.outlook.com (2603:10b6:8:29e::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Wed, 12 Aug 2026 11:21:31 +0000 Received: from BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8]) by BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8%5]) with mapi id 15.21.0292.024; Wed, 12 Aug 2026 11:21:31 +0000 From: Richard Cheng To: dave@stgolabs.net, jic23@kernel.org, dave.jiang@intel.com, alison.schofield@intel.com, vishal.l.verma@intel.com Cc: iweiny@kernel.org, ming.li@zohomail.com, gourry@gourry.net, rrichter@amd.com, linux-cxl@vger.kernel.org, linux-kernel@vger.kernel.org, kees@kernel.org, newtonl@nvidia.com, kristinc@nvidia.com, kaihengf@nvidia.com, kobak@nvidia.com, Richard Cheng Subject: [PATCH v4 2/6] cxl/region: Scan all partitions for unmapped poison Date: Wed, 12 Aug 2026 19:21:03 +0800 Message-ID: <20260812112107.56181-3-icheng@nvidia.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260812112107.56181-1-icheng@nvidia.com> References: <20260812112107.56181-1-icheng@nvidia.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: KUZPR03CA0009.apcprd03.prod.outlook.com (2603:1096:d10:2a::9) To BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL0PR12MB2370:EE_|DS4PR12MB9748:EE_ X-MS-Office365-Filtering-Correlation-Id: 543bb877-1c5a-4905-3ccb-08def863dbb4 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|7416014|366016|10067099003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: deizEeQb5uI+jlcLLY6GvqK1os4TXsxQILWaijmwJoeKkv3LglRe3oQHn4CPkhKtASrZeebSvJj1Q/6ZhihzzaZvhADelMb/xyC+3SnyDaye08Q46b/7PavKF13BXk6r8rwnZWcy20bgSmjGZ+Ab0eH9FQWYHnkl4FWaSSpDsxq78cYjrFDZEgMJAXuyhItcrO1l2oCCG5wVe6ji4S/0oDd2Qj2R41MJjjo4roEvWa8K6N/81Wt2lqrlVly5qdiiisXik2TqLTQN3gXb1l0fhERdQbMB6oOMmM8qvYwpVuEWr43KTT1qJdydqfWRC9Br+2CGF29/TlDk2iek2vpoxUIfk2C1DNxpDGBgog1sVM8ZAyiLrdX8Gd8s6ms1QVOK99etM5gaK6kU4bb/MOfnQ7vCPlG+l4T8U208BBeY/V9YAFKOmq15OxfERDz4He12NlvBuyWU+4QyMA2KuKhFG7HmIcTar8bbRRNdJ+cNIAGWNJsmbw2XZZArA+JrW0oHAtH6GW2KZNxSEFrKB1mQO9+cjIB9VJeJJQuuqz5hU0oz+2x06e3yGu7U9NuFjooQbp46hvOHlTgjyJdjFhNggMxKj2wdJjRrDBQZ6kTNAuwA5hegMWFUpGf/Xf8knwqMKIiKNz7dAMlPgqt8LkZAdSGrmDuPnIcGwZrpTOrRdBI= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR12MB2370.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(7416014)(366016)(10067099003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?SgRccEqSDVnRsYfgauheFYuQBMRCZHbOyOeZiGWMafH210f057qCIZSnBDoH?= =?us-ascii?Q?3HMDXXOd1P9UGZgAq24HIpvt6TC86gn8mxD6e1Vgtg8vhjb8sUu0qJZQXnm2?= =?us-ascii?Q?HX+U3VIh68A5296Wov05sRitDM4LPU4Y0ertSrB45c7+yjxknFAMrrKVliIq?= =?us-ascii?Q?kCgckR66xS5ZvezaWDt6/IhxUSu+Z4NRJFX6FS98AbcIouaZxLaql+uPeP0U?= =?us-ascii?Q?y4zm8bLZaZ9E6OmBDh1pPURITo83QNQJ2Zltw86yDfbRLlrJNkMIa/LgL64s?= =?us-ascii?Q?aKxE/QtjEcFFuJZL1LuKli8hcln/ILGegTzgY/QRvILUiX8+3HswbAXZ/xY4?= =?us-ascii?Q?trRPSpdW7ASwvSSBZMN6wLw1/xoqTtHj1vudFoGG2QbqlFLvyxvlwKIooMPM?= =?us-ascii?Q?i5VesTaMfJhLv8CaPmTlIcxXPnupelgjFbBs/7VkPmt5EvonALt1wg3wwe4L?= =?us-ascii?Q?dqSdZivYsuYAVUZBDcJ08mk81Wg/dgcC75tbNJrZhTv5fZ3WajEbJnIt/Un1?= =?us-ascii?Q?KRu3XmkKozR33n6RXClgQ5JpiDldLCGYOmz0QnJqqIUTKGm6k2eWDajCjVk4?= =?us-ascii?Q?lFx6/sKQXITaHB7CbkwVmCpDUqORjGM3rDYiqMSmHk6c5mfoRtGctsJCTDil?= =?us-ascii?Q?ZTNhs6bOdyWSSQjjlfTEkDirEA8Gjzu32muGjWmB2jQ8YrZGIBoj6YJ4Ql9A?= =?us-ascii?Q?EhZcCx5CLPlbiDlubjvMpwMSkw/iSCOIAi2A6ZZYrNazXQCgXTLbV4GMN9zp?= =?us-ascii?Q?qpSS538A0r648gz30V1tfjlls7OEQvtswOp7IklfV5Dl1MP9xQXkOWEir+Mk?= =?us-ascii?Q?O0as0+iC3XtkYc7yfwG2WE6cLRzQSDfVhrAZJ+2hXO2ctn2cieRQDRDykK2W?= =?us-ascii?Q?o4H8ZIhcm/T0NaEoPDs/IvyJo28oWhP0o/UBIokfkw/i8pDU5C1+RqJpwMJF?= =?us-ascii?Q?5ftNjAUJa2cOwO1U/mo32cNbFwGvZ7sKhB2HkqbQJZhN/KTzegm08WZOCcwb?= =?us-ascii?Q?WiSPOHjPWHDCTh3BipAX1iSNZVA6NmEk7OAM/IofmkfcfV3GhG+ZVepcsekT?= =?us-ascii?Q?e8UICIElQ62VEvorO33iYKH3ZJtd7cFxf1nJx0XlEjPtL5gkTWdWpJxgChQ7?= =?us-ascii?Q?hCZZKE30H3X9xkTVVasiTWIsCH2kzj3UGv5LDyuEMllThvav/NP4O9jRCjCA?= =?us-ascii?Q?2PQ8HJ/QmEhlSPN7fp6kT3nwTz9gGg8B7kMnO82FFE+c9wg4KX08flzN1JkG?= =?us-ascii?Q?z/3xArj529CRFiA+DyBfqMZ4WJrvoQ6NlPDit0GtxmS2M1XmIuVr4YEWRMxy?= =?us-ascii?Q?ElwaJTD8oeia26NR84qvDRZbuHWiEIgnvmFT27HdvfgKQTV0KpLNTJUvLbqj?= =?us-ascii?Q?PqIsY1h5rE//ytZcwSn2Vm+Nc18WxVYvEubnNkClTisWT9xLhQqWEx/ZxVb8?= =?us-ascii?Q?ts0OKAfTQAlZiORLsvXD7G514E6oy27ifYY9PZLo6RPHs+PYxDZZf9u9CcRY?= =?us-ascii?Q?NhpAVEdY8na/3FpuNF0egtr+SZFc+zrzV8w18w8Owi/ayzXbyTzLT7EtGxnZ?= =?us-ascii?Q?izEQcKyAmLWXzlbQ2eA88xHGKVcnfi2680Gzw/9mTliweBcFQHV6Yk6OjTGK?= =?us-ascii?Q?W0FvfogV2SAvktG1vs9GsTMQL8myCrCAUH8QqGftPHpgMQprkJbQSddw9v7U?= =?us-ascii?Q?GYHlQfS5ZlQWsZfj8wZH6Po6kDAsLEC1cQ5TfZwWGiZuQSXB7xXtPQw8auBE?= =?us-ascii?Q?HtRTfX+ReQ=3D=3D?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 543bb877-1c5a-4905-3ccb-08def863dbb4 X-MS-Exchange-CrossTenant-AuthSource: BL0PR12MB2370.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 11:21:31.0034 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: rcoz7wV7ODWDIffeMNF6mGY3bd0WWacnRwP9pC95W7FMAkzvIKSpkIOleqbfXpvuzcoJm8mFN3MqbvZRMrQKNw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR12MB9748 Content-Type: text/plain; charset="utf-8" cxl_get_poison_unmapped() sweeps the unmapped tail of each partition from ctx->part onward. A fully-mapped partition has no unmapped tail, it's a normal per-partition state, but the loop treated it with break, aborting the whole sweep and silently skipping unmapped poison in all later partition. Use continue so a fully-mapped partition is skipped and later partitions are still scanned. Fixes: be5cbd0840275 ("cxl: Kill enum cxl_decoder_mode") Reviewed-by: Dave Jiang Reviewed-by: Alison Schofield Tested-by: Alison Schofield Signed-off-by: Richard Cheng --- Changelog: v1->v2: - Tweak commit message --- drivers/cxl/core/region.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/cxl/core/region.c b/drivers/cxl/core/region.c index 27e63e6dab7c..b03f30c04d35 100644 --- a/drivers/cxl/core/region.c +++ b/drivers/cxl/core/region.c @@ -2928,7 +2928,7 @@ static int cxl_get_poison_unmapped(struct cxl_memdev = *cxlmd, offset =3D res->start; length =3D res->end - offset + 1; if (!length) - break; + continue; rc =3D cxl_mem_get_poison(cxlmd, offset, length, NULL); if (rc =3D=3D -EFAULT && cxlds->part[i].mode =3D=3D CXL_PARTMODE_RAM) continue; --=20 2.43.0 From nobody Tue Sep 29 04:39:03 2026 Received: from DM5PR21CU001.outbound.protection.outlook.com (mail-centralusazon11011008.outbound.protection.outlook.com [52.101.62.8]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D5D2F4399CC; Wed, 12 Aug 2026 11:21:42 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.62.8 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533704; cv=fail; b=lWk8Asgw0tM2bCDFVUdmEaFsOwme6daZofUnI84CyLfbqHC51ehVWFi8Lv8h488r4wGeK4SykrssCSgQ53zVFTpWSEWtxVM3rBcOk4lyWkZoFOdBZ/AYjXhBWif5ZiKvfffwu2ssNC2t6tAyso+hom9iXf9a35X5VCJ35cQGUJs= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533704; c=relaxed/simple; bh=N8sO820OP/w/ocMdUW+tso8YAFf/1yY+6ASfXgI4MtU=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=UI7O/zHuykJyFHVS5EqXOA+p4h7GR6TUiKQQ5TFYM8dgc+gFy+Hyf+SPK37tOIuv6vS79+8sG2M6Qw7o6n90+pa3rNJzp9uzuDQFKWNyhkP4lnFw1QnfHjtzmBhEGlopk9E0aXAks9NPgRklMzF5KgEjkkQC48ReEiRx0eM5fBI= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=Axswf55F; arc=fail smtp.client-ip=52.101.62.8 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="Axswf55F" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ddEP1cyfdAGXxXu+65OnqPNIYm+1q1ezO1L05i27i/LKrgN2OCKQKAYtvql/RSGxhxU/2FE8/HLzDEIIwWSCBaOfT5Y1bcaWpyaIykciTlGE3xZI4XUzqxiFmywCTdm7a9VsU1I2hRCvgniSeSY57LMd4dezVU2Kb0PV84Nk85zFzwizs4oYTtSMyvZ6DS4robT/oYdseRsO4vIhX83ScPjuJ8NUjj4Aapcj5CDBuL1r/nTboHn8aFnn68RKgS5gbQKzy3gkMYbhrf8aNHPA5KBaCLvRVGXPp0xtj1QScsDkqCJ8fKN60yt4McncN83ipIUjjLW7VuKqxOj8vuCFhQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Ra+QSLoXzJ1Yf2fHmyX+ygANlqx0NusVyFPI0RGSLso=; b=RFVJ21JR/zEmFr9Djtla5YAFqAMqp6jNZYfwhKBdLqDJauSynrsOGfS+d0i0sDtB0S8ABp8/RcdHRcErdFxbBPWP/WNbh2gw7KiujMNtOd/Q9MsnRhEMCdEmMb+IAVX7iBQCOP7WbwCCH2ztN021J4Ozn7wmrsEWifzf4sx2Vmmbz7NE4nA2m429PToDLeiyEVgke6XJyRutxxPrtXNIg2+vZ5v3rRhP6XjoBO4mwO/GyrQF5bfRYHNcSte4sCJ2b4nQDKLTP0ZiRivY1De0jDfVqftkHJzJsbBNNKBlHtrtlNQICHly7dvA7IbIbAPnVAQqG137s8o+zPNs9hMxtw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ra+QSLoXzJ1Yf2fHmyX+ygANlqx0NusVyFPI0RGSLso=; b=Axswf55FLLHRSPqAsqzRxcsA4rFu6SgKobCbs7TpefYjy3kYXiJy8ghKwexzvqeHueO/uAhENcgU4RPgizZzzGmU8Vj0OS6bp9fb7FAUYiW5W3vDFJOSn9z9jeh22ob+Gl0MqmgfdtW0pXGajkRL79taKY9Ve+JNmTo4i/mNyPaQNZgWf5cd5TYFXsz2ucOvhSarI4BBDcDEz4k611DfSSGzP4QysMm78IeusotmI4AaohLMLFJd+HC/8LBRBmiTNbIF31bLHzOCAlNMQfbqp/eAfqozqN15vW5kC0mm2x3UDQOSheVfwhiFriLqn7s0jSigHOgMKaNWTMo7J3eVLQ== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) by DS4PR12MB9748.namprd12.prod.outlook.com (2603:10b6:8:29e::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Wed, 12 Aug 2026 11:21:39 +0000 Received: from BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8]) by BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8%5]) with mapi id 15.21.0292.024; Wed, 12 Aug 2026 11:21:39 +0000 From: Richard Cheng To: dave@stgolabs.net, jic23@kernel.org, dave.jiang@intel.com, alison.schofield@intel.com, vishal.l.verma@intel.com Cc: iweiny@kernel.org, ming.li@zohomail.com, gourry@gourry.net, rrichter@amd.com, linux-cxl@vger.kernel.org, linux-kernel@vger.kernel.org, kees@kernel.org, newtonl@nvidia.com, kristinc@nvidia.com, kaihengf@nvidia.com, kobak@nvidia.com, Richard Cheng Subject: [PATCH v4 3/6] cxl/region: Don't leak tolerated RAM -EFAULT from unmapped poison scan Date: Wed, 12 Aug 2026 19:21:04 +0800 Message-ID: <20260812112107.56181-4-icheng@nvidia.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260812112107.56181-1-icheng@nvidia.com> References: <20260812112107.56181-1-icheng@nvidia.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: KUZPR03CA0003.apcprd03.prod.outlook.com (2603:1096:d10:2a::10) To BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL0PR12MB2370:EE_|DS4PR12MB9748:EE_ X-MS-Office365-Filtering-Correlation-Id: 9de866f4-a831-4985-e137-08def863e0ae X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|7416014|366016|10067099003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR12MB2370.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(7416014)(366016)(10067099003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?zHHNnbrr4iGBHhPCESD3J+QRbfkMnMENgngnameHaxrpHpv9PmLoBwAKrHgw?= =?us-ascii?Q?xTIz+GocDbA9mCnwOK3HFSUPI7MbXuCkJHodRghdkDQNZJWSvxErkS0u8xL7?= =?us-ascii?Q?2iS3sz92vsCyaIjg5CTE1b5hS4T9nJY6QBiRd1bLKgVxzSj2Bspr/WsjyxKO?= =?us-ascii?Q?Ziu4//Ux46UAZVmrxx9X+qzOu9x8AWN0kP6LCSUSh6KYItwpOzP3wV5KfgJT?= =?us-ascii?Q?8ywhuvd8KB8Gs3VQJzGQtRxVBTskRDD3LKS+95xtgmVVlWngyHrOci5rn5Ng?= =?us-ascii?Q?QpbeQkxFfFSjJ8fPjg8zWgxob6YDYPAdhG2Pu+a7xuuDCnH+9GGU3XV/h6uy?= =?us-ascii?Q?kvpJr09+ascnlptvaLC4InvPEHS5/q1Bq+FRQJC/b1TZ341ZNKgSBmBg4hXH?= =?us-ascii?Q?pl1QxA0KqoUTMEO1fy+gEcH+jMbXmdZY5mPQH1znyfTyh5A78vyJ+tYuqu6c?= =?us-ascii?Q?O0beUfYTlR+tpVEkWDqrJRpI3Lx6S8bMuBljEnn3Wrq0ybsAyG/lIaZoaDC/?= =?us-ascii?Q?CYj7C3hUcxt0sfCI15Mov9VCjwSWzwzt7S9yOS0Ek0YEk4vGQmCXGVJaGF3d?= =?us-ascii?Q?P8VCJtaZcRu8SnW2IIjMW5hdpPeZ/M7guFNHA0mjv9/p6ioIBoa7FeyqhtQw?= =?us-ascii?Q?TBVquBINlD3Ku4hMNOz0wLiuQgXUmeweKMoPQ2Ov05NOyUGy23d7XaRlFhrg?= =?us-ascii?Q?RkGHga1p/8lPzjQrKPK/Jop+8nVhzURtlpVjK2jNqT0exRO/CbZG1j4z97KE?= =?us-ascii?Q?rcwMPmsS0SZA6OEPPuVJe750GTeXTLqfkWKS3TiBoSyR9yCwbW3aiaCQcd77?= =?us-ascii?Q?C8ZKz/ERqHLB5+3hHPNMUlsuOrQaY/cHUmJZHfzy3q5GiRu5xpz5czoj9TIa?= =?us-ascii?Q?UkAyMNrP0R7Ehar5E0GV1XBg6FwHiNRUHwMp4jEbKJdY2ALVUuk58qxFqmoW?= =?us-ascii?Q?PspCeFgLFoTkP5g7YoLTvJ6V0jyJX9Q/G5h3O9mjGPUcia3Yq5rmfcFFluYh?= =?us-ascii?Q?oBfL5yweOuKpiBcvqaCjaDXI4CeLe9Gyump6XlcnIlkOzmlUKxnPBKbBNkgc?= =?us-ascii?Q?EZdnsPbYI2Hfmb6raze10J/Xe8h6j9CUQj4yN7CCFHrRSeXsEHY9Noljuvzo?= =?us-ascii?Q?hPamnzw3RZnRYfPSO1luLxKS6QzPGxAFKa8+vKQ8tzJcwPRjzBwY1Ddxhm0x?= =?us-ascii?Q?Lxjc7II1Mz//u4/41lfX24VesZadaugQ79NQtHwUawWZmEU1J/uqDz0Gs24U?= =?us-ascii?Q?bKmsqJgajmpxhcuOR6t2D/3qrzLp3aoCzla00uVrrbEPUowvekL1on184NbP?= =?us-ascii?Q?5ae3qCSewdMhwzXTeydgyPYIW4bk/pKekFidTsxTvolnxO9n602IOa/e9BqV?= =?us-ascii?Q?hZzlCy/yGltbBemEVAi3GEWO2AVkndtgAlWjLB0++OVZ41AMKYfxhAiqjRsY?= =?us-ascii?Q?EKCkF1qoRJ9eArzYYLgABDD2thw+Q2x19cifMmCV9OQ6RNBF95xwz6ucj2fH?= =?us-ascii?Q?DWGpkybqUISNW4JgFT/ls5UVW6COGn53SSz7ljpx3qsQZBuSst+5VdaKvtd3?= =?us-ascii?Q?oiDxXzpNqh5n+EsWPpJ3MC4t+Tp5Z/bbJb8Qu46k+Av7TciDVjLZVdWzLT9X?= =?us-ascii?Q?Y6PzRmK+ZL1sTxmSO/hopSGuOOubRDj5sNbPkUkmIQQ9lwdbHGWJnrUc4UZN?= =?us-ascii?Q?IvTAI7vTCPS7jLJxKWreydd+D5larF0CNpmqArnPK889FV6Th5Dtp2t25SMC?= =?us-ascii?Q?89t3Jhl3xw=3D=3D?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9de866f4-a831-4985-e137-08def863e0ae X-MS-Exchange-CrossTenant-AuthSource: BL0PR12MB2370.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 11:21:39.1426 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: lzNWJJ0N6l28vV1gYbw1OFtnDWrf6oYZpmvbDpDTIwcCmT2EzeyBFzWQgGGkC/y4pfX9s1iEZXMGeTVj2tWNgg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR12MB9748 Content-Type: text/plain; charset="utf-8" cxl_get_poison_unmapped() tolerates the -EFAULT a RAM partition returns for Get Poison List by skipping that partition, but left rc holding the error. If the tolerated RAM fault was the last poison query before the loop ended, the function returned a spurious -EFAULT and the poison-list read failed even though enumeration succeeded. Reset rc to 0 when tolerating the fault, matching poison_by_decoder(). Fixes: be5cbd0840275 ("cxl: Kill enum cxl_decoder_mode") Reviewed-by: Dave Jiang Signed-off-by: Richard Cheng --- drivers/cxl/core/region.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/cxl/core/region.c b/drivers/cxl/core/region.c index b03f30c04d35..ddf12075b95c 100644 --- a/drivers/cxl/core/region.c +++ b/drivers/cxl/core/region.c @@ -2930,8 +2930,10 @@ static int cxl_get_poison_unmapped(struct cxl_memdev= *cxlmd, if (!length) continue; rc =3D cxl_mem_get_poison(cxlmd, offset, length, NULL); - if (rc =3D=3D -EFAULT && cxlds->part[i].mode =3D=3D CXL_PARTMODE_RAM) + if (rc =3D=3D -EFAULT && cxlds->part[i].mode =3D=3D CXL_PARTMODE_RAM) { + rc =3D 0; continue; + } if (rc) break; } --=20 2.43.0 From nobody Tue Sep 29 04:39:03 2026 Received: from BN1PR04CU002.outbound.protection.outlook.com (mail-eastus2azon11010027.outbound.protection.outlook.com [52.101.56.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 663D6435507; Wed, 12 Aug 2026 11:21:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.56.27 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533712; cv=fail; b=KdJZsTKQaa7wAzNwkRQJ6HplQpoSQGCTVeKvvwrRaNHTTW0kSjRyfSQRvqeLfEL3aBxonlwEU3nmBS7fflBug6p3/OTUY00Uq2R+jlU2R9wxMYI8wIhuM+wCvLoCadh/FnHnZTahBLWnjlL/UKWmEhZf5R/nxslLNgHvTXSHIE8= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533712; c=relaxed/simple; bh=zBsmORreD2h3FKYFKes6260lQCIMBwcEsrpBp4p8AVo=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=k+q8IzUbbsr3wxonQp1n2nxrXFhzb749JYtcOOLSPyFHybGaMMaM5wytD5kQ4kLhmct8UDmmAmmdUMfFdnSXuTnsdZ6UyiI8yp/o/WgKXVtDnpOA/OoifTRZWeS0HcDzixZJefIieBirvGSkOXARoU9oylz+8B7CpWXtWOWCiEI= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=rDcVvshp; arc=fail smtp.client-ip=52.101.56.27 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="rDcVvshp" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=YFQ2lD+mA7ET7NjTJfuCn9sCPcjALWHiWwCsuIuLXugjBKHD/HujuBMBDLZrHbqmanyeNlClDrBugCFAbJ2GkTHk7DxLenGt8NoH8XvUpBHVvfOTeF3rYVgowmrzEC+uXGVXVsXWTCPoC3fZXeEn1hoI27119FZaaRp9vVWmI7sO8EbpvYdnz6aqGufUllSKeb7UZxJaMjPvcBIOe8/w95B9gWxJgkBqKRefvuPfhMCoHE2n6ZnTNyKYPQK+7n2PwInixAJIaZTYILTtPtteGLVv+RYWStHpG13z7s/J51AJ42+EDq6FKrQyQ0MvsSkzdWddrn/tPGr1vgYsLz5djA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uRbySNrBgmxr00b7zAbOvHMIvwaIdc+gbkt7kitIzUU=; b=hLk8U6NbO75skCXcNHRhFb3ftIbl84scL5yk8z5/ckjfScU/TSoMtXFb1l3YN6xYQ5G3IMfdfQhibQR/M2TF0nhc2h7WEKDplZJAcRz+s9Xu+/7Pl+NsXzTQ+tJpeaQx3ku3xsuRcExse+Sxz6kd/3zEDLI3IIVVcXVAwz0mQfAi1idytuUuB6MdUScoLzpFcyMHSJwR2TcfkzXATZFzRyapRcF2qAQgGjINlrHYuR/zA8WNiZXb+bFOvFZ+KwPFvtanj1MShBcAzNXNFhaY7FvzEPQF5MNIiN4xjT0vRFBke9kHy3KNhk3tDTTOCGjXXjQ1ojziqIAYMQA5v+kXCg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uRbySNrBgmxr00b7zAbOvHMIvwaIdc+gbkt7kitIzUU=; b=rDcVvshpwPHBbqYCIPJUyV0zXjQOR+7j7sOwTj/aI53e2k7X80wbZd7jvUjOZl8jTkxuqO88yt6mFtfJybXeD9q9n7X2zd7zkLBDTZnEmkH8PLLs4g0DuIjcuF8uIZHpovuDnkk2+Oqy1ZAPSk0oHQhTGG/05uwI0R/4MUTaFAlY8LB3teGtY19jRrFKSxqHciV2nl5quENU/rQHBJvs/2R79us+yt8JCmpwfLu/qUoZH/ZrEllnnNE3FEJEETsHCVRQvWQTHV9rfrXZPY5eZCdEmqoCGZDXcVC2Bir3p7hC/qxeMEEW7IXRVjHOTjI8ftrueEVz5DQU3v1brkgTKg== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) by DS4PR12MB9748.namprd12.prod.outlook.com (2603:10b6:8:29e::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Wed, 12 Aug 2026 11:21:47 +0000 Received: from BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8]) by BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8%5]) with mapi id 15.21.0292.024; Wed, 12 Aug 2026 11:21:46 +0000 From: Richard Cheng To: dave@stgolabs.net, jic23@kernel.org, dave.jiang@intel.com, alison.schofield@intel.com, vishal.l.verma@intel.com Cc: iweiny@kernel.org, ming.li@zohomail.com, gourry@gourry.net, rrichter@amd.com, linux-cxl@vger.kernel.org, linux-kernel@vger.kernel.org, kees@kernel.org, newtonl@nvidia.com, kristinc@nvidia.com, kaihengf@nvidia.com, kobak@nvidia.com, Richard Cheng Subject: [PATCH v4 4/6] cxl/region: Start unmapped poison scan at the committed decoder boundary Date: Wed, 12 Aug 2026 19:21:05 +0800 Message-ID: <20260812112107.56181-5-icheng@nvidia.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260812112107.56181-1-icheng@nvidia.com> References: <20260812112107.56181-1-icheng@nvidia.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: KUZPR04CA0020.apcprd04.prod.outlook.com (2603:1096:d10:25::10) To BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL0PR12MB2370:EE_|DS4PR12MB9748:EE_ X-MS-Office365-Filtering-Correlation-Id: a6203afa-0f9d-42f7-3942-08def863e54d X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|7416014|366016|10067099003|56012099006|5023799004|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR12MB2370.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(7416014)(366016)(10067099003)(56012099006)(5023799004)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?tUW/DHiMijJ9cXT/fcKU9KwAQxcUcJc2rbM9Ml++gcpJhKkUUaA9aWVuloJH?= =?us-ascii?Q?EsQdLOw8uTcPBVf1UTiCPZH5+r2UceKfFAYHu3UYceuikLEbGyvYpA4E2krU?= =?us-ascii?Q?C7vi3A7nm0JHBBCBbtaScoLGC+6d88+vlHB4xr5dcrwBKHFe2npH4kaOI8cI?= =?us-ascii?Q?xS3Y5iKsM2dQYKq8A443zsGaEMnsFxkrnqHgQXT/phrZ8sSsZBcZH/ahp33o?= =?us-ascii?Q?82ugRLcMrL9t4k3CEBrcXuglSywfepwLmQedgGhAyeH1PhMz9GRsJesNFxk1?= =?us-ascii?Q?hGCEyU7bb53ejphWHGVavqMspH02SR6ameKVRpIftBypEKu2nDCMJsqykPd4?= =?us-ascii?Q?NT9bv62ET0LBcHDsRCqJR/+SRLn28bmMUBhLQA4RovUVfeAnqjz2QIdaBo+a?= =?us-ascii?Q?FK87NhC5tUA7ZoD8xgWFyVF4la2/U+96qEq2H3Rj8vfJ/mT2LQ6FjX3mQpzk?= =?us-ascii?Q?3zweQ6VpRyBtmRVYMqufEpzRqhc6lYMxd0QMnG4lGJeY7paXjQ/OrwrSmKFk?= =?us-ascii?Q?kPSp6Tw5dH5wB6/OcXKRV77SqCKkvVH7KiBlFRXi5pc5VIsXdd/kfqo9pQ3o?= =?us-ascii?Q?Gl/NpSt/fvQmeqezFCS2lwh2uGXbTGLc9oj7Y0T794gWSfSDIst4qzaGI9kr?= =?us-ascii?Q?HJt7XnxialBJ27Jyn3W+stp/2Ulh7t5ykGC3OsJOzQaH2BMrNMq9aFTNoPR/?= =?us-ascii?Q?n8OT6pvQEAPt/xv8Lp3DL9+i2rBKTOkjBPMxVkhiNB2ufmDkJzexkv7mfYdt?= =?us-ascii?Q?TqqLyQYmISGuRwVb6pAZVrX7qLsVVePDF53zIMFffpfXCTyDjpAIJA4UAkGK?= =?us-ascii?Q?MURpByPR1B7a4s0wBY2rMcxWEn2J+hmVAnH4NheIv8cE4BoATRQCVG4EtuOe?= =?us-ascii?Q?CTti0hmJ3686bOmMmXrJlGENEW0tw8nUYOCp1fwyp8xRBPh7Z0GUr/UfGkts?= =?us-ascii?Q?KJYOj7x0MiuRSPr+dKByhY5wyxTNRV30C79H8ihjDRU98kEUJklgXKMUnCBp?= =?us-ascii?Q?ZXfUulyDQs8ZsJJa4Fbp7ht2ReVprc9bUlNAup1itJBrJ5QrC0MjuMQ49ZpW?= =?us-ascii?Q?G+u2NYyfT90W/NxgB88DKBwMcPZzRpOxk/gB2lvU1hN52puXC68qv7LPAA2y?= =?us-ascii?Q?bbKbq1V55yAbGtdgkJe7yZagidrya02wzbiTRwm5J0PILaMBY0GcRS//5tiq?= =?us-ascii?Q?pJ1vMgWx4zuwTVqNKii+h8v6Xydnzu0E7sWQJ5o8URBc8gv+QHWaRtbYjmf1?= =?us-ascii?Q?KhOyNXyiV2VVEHOj6kLCveMYFZyQ1EX5Vo90KgYoiiwRHci3N51vkDSgxk6x?= =?us-ascii?Q?uO6CgNg1K/PfPvyZrP6PF6R/lRjqbi0rKpPmYA8ZcRNFexRNXRzRj66N758d?= =?us-ascii?Q?dmWA4+UJnkEIKjfJ2bPGijYSxmU8mvuQk9VeUQMuahUGDhAqhvKbEtiSyu2m?= =?us-ascii?Q?g9lHerPbFOKi6FWQgAI5BPP0/Ee5qpg7K2bBEsW8i8dzNOeQV4U1WTD8y5S0?= =?us-ascii?Q?3107vBKGlefuEUENmYbrdS8vNqasQbaLr40VlMYGLcmgmYAcpc5iTtjVYSbG?= =?us-ascii?Q?teGQnvZugUMDGLwhZosaKiX5Fcpims29pfNXc1SIIpMWINdW0J/px4CfO35I?= =?us-ascii?Q?zxf03jSE4XGvC0FSol2EKLPOYFTUMUIdV39gHCNs8dy8xb4ESneCE4N1WtmW?= =?us-ascii?Q?vTgbVrWa4vPR1K/sG3chbH/TNEQLOm5lCU4PCc1v29G0zX8O4gWRxPM27XMX?= =?us-ascii?Q?Jg3JgZQ7dA=3D=3D?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: a6203afa-0f9d-42f7-3942-08def863e54d X-MS-Exchange-CrossTenant-AuthSource: BL0PR12MB2370.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 11:21:46.8832 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: Y4vB4+mLXSwv95YE3EgyyKzi2ZuyCDPYfZ00Bl/Ph6QUeXdIWLixD7au4VMQxQTyWn3qLL2rMBHudWK6SF+Jpw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR12MB9748 Content-Type: text/plain; charset="utf-8" poison_by_decoder() stops at the last committed decoder and records the handoff in ctx->offset, but cxl_get_poison_unmapped() ignores it and starts after the highest DPA allocation instead. Allocation exist for uncommitted decoders too, so their DPA is skipped by both phases and poison there is never reported. Resume the scan at ctx->offset, and scan later partitions in full, restoring the pre-rewrite behavior. Fixes: be5cbd084027 ("cxl: Kill enum cxl_decoder_mode") Signed-off-by: Richard Cheng --- Changelog: v1->v2: - New added patch ( sashiko's report ) --- drivers/cxl/core/region.c | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/drivers/cxl/core/region.c b/drivers/cxl/core/region.c index ddf12075b95c..b7dc5d4988da 100644 --- a/drivers/cxl/core/region.c +++ b/drivers/cxl/core/region.c @@ -2907,7 +2907,6 @@ static int cxl_get_poison_unmapped(struct cxl_memdev = *cxlmd, { struct cxl_dev_state *cxlds =3D cxlmd->cxlds; const struct resource *res; - struct resource *p, *last; u64 offset, length; int rc =3D 0; =20 @@ -2920,10 +2919,8 @@ static int cxl_get_poison_unmapped(struct cxl_memdev= *cxlmd, */ for (int i =3D ctx->part; i < cxlds->nr_partitions; i++) { res =3D &cxlds->part[i].res; - for (p =3D res->child, last =3D NULL; p; p =3D p->sibling) - last =3D p; - if (last) - offset =3D last->end + 1; + if (i =3D=3D ctx->part) + offset =3D ctx->offset; else offset =3D res->start; length =3D res->end - offset + 1; --=20 2.43.0 From nobody Tue Sep 29 04:39:03 2026 Received: from SJ2PR03CU001.outbound.protection.outlook.com (mail-westusazon11012035.outbound.protection.outlook.com [52.101.43.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A9A084322EC; Wed, 12 Aug 2026 11:21:59 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.43.35 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533720; cv=fail; b=nXwJmzyMW7T2t6U+uvbkoV5u/Oa20XO/0qn7g0VKBq86CBn0s08N8ZfxdVNi4fVPeJN9bV5fKkvi9JZOYmgJhPUkEMbIFDJoYJiCM4pPvtzaAbAy2EgFgS7kZbJI4Coh0e40/Y+QNiSW+G6gqV8Fzrq6isInwOOzd6HYjaj+6uo= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533720; c=relaxed/simple; bh=TGk1ixv/4Xsxjm/SwXk091TqGoq8daaM4ISGhJYDHIk=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=SYWlPk+IVFpoxd+bZ50jupM3PveFfSX3rCj0aqdM+D+aoxyX2CHx5es+2+sz2or3TT346fv0AQtTFhIzFuzQJzQfLrW2AkKtgcGD9o5b82n1xfKMXomLie7M4uoyPamVVgtueyyCHG1f5T//16VAbudgpmevb9DSXPkASIFqs2w= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=AgppkvrL; arc=fail smtp.client-ip=52.101.43.35 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="AgppkvrL" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=X3BO0VkNFz3fiXneeO9qkw6xKzybW6+LZ4+z80C0l09Fysmc9GzZSoc6z8GVAoX5PYaomNTdyJ5y2EfALBbKGC7ojnpp77Gh1P9b+D8wIVSY90+p6pricq9DH7GOaqCeQV19USjEmM8ZEopHTayRxKEtsXiks4RA0kseqVFnV256PoWEB4D13cngTlmkiv1UPR66UMEM0iVASjiAjUuC6CmcQvFlJ+XPVih0p3SNtxMt3sSVMDAnopCwiCbtYZdyWFqPGDOcPYeGqYEzNoLHWi0MG79zJrIM+BNMpH05u2kxZFOkRrPdPDEVMkTYsT1rKqmWua8Yj8XuhnT4nMvaEw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=eouvKWGNQh96dmqUMkxqaJZQZC8igDESkQGRD0speSk=; b=I1lKPsj+zwcFjEEUM3W6nP6JS/6EbYNbCXjUuJjNhVpxNVB/jf0Eij0Wv7ppnZG/WUHfePZT3Ps6VG3zuhX8gmpRQUwifloM1umByaG8yAko3TWhbxA9LNf0Wj05lSMwlAy4Bt4ADFGMtHDX3pZfS5kzxP/TZUIUBcyB1Y2BRSUDEyP2abUcfNMxPZxLk3njYzABdlu3o9AfAZdD0MGa331r3tehZuS5ivn0Rv56IiqHBBMY1FyLwctyP4GFhKL8qUkwX2EX4IOeAjVslGhMIFDQDSpyoNZ8oNiedYc2a66BeC+L09m/nSEJKUdca/g9KaNrr1aMy3c2icqRJIrLMw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eouvKWGNQh96dmqUMkxqaJZQZC8igDESkQGRD0speSk=; b=AgppkvrLPz3G51dBn35Dabif9eC98ia1RBOvHKzm+In4uSxVBaSSBrgn1pSRqpM1QxupM1fudnMX+9z7h2ir13LE4beC+DAgJwcYRdzoUKXdUJgkAGd+XLlTppL89+fZ+OtrjD+3A2IPJRGegAQb2pH83ZAl8KazPMbQPlt7rCD9ZeaqQrAHDLrS+zshxUt4Vf+YpbdHnx6trf9lkbEBD6VW+iky3ctiEK6rSYEpj0+zQchLOljg6Hng2kKndji2xRpetL2WQhOr1PkY1bWPZT+r1UgKU1BenxPNCkj++/Qb71LiHVqOXEliNalU0kjlvhpdkePDED1sAMJHO1Drow== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) by DS4PR12MB9748.namprd12.prod.outlook.com (2603:10b6:8:29e::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Wed, 12 Aug 2026 11:21:56 +0000 Received: from BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8]) by BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8%5]) with mapi id 15.21.0292.024; Wed, 12 Aug 2026 11:21:56 +0000 From: Richard Cheng To: dave@stgolabs.net, jic23@kernel.org, dave.jiang@intel.com, alison.schofield@intel.com, vishal.l.verma@intel.com Cc: iweiny@kernel.org, ming.li@zohomail.com, gourry@gourry.net, rrichter@amd.com, linux-cxl@vger.kernel.org, linux-kernel@vger.kernel.org, kees@kernel.org, newtonl@nvidia.com, kristinc@nvidia.com, kaihengf@nvidia.com, kobak@nvidia.com, Richard Cheng Subject: [PATCH v4 5/6] cxl/memdev: Don't overwrite the error from an earlier partition poison query Date: Wed, 12 Aug 2026 19:21:06 +0800 Message-ID: <20260812112107.56181-6-icheng@nvidia.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260812112107.56181-1-icheng@nvidia.com> References: <20260812112107.56181-1-icheng@nvidia.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: KUZPR04CA0023.apcprd04.prod.outlook.com (2603:1096:d10:25::13) To BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL0PR12MB2370:EE_|DS4PR12MB9748:EE_ X-MS-Office365-Filtering-Correlation-Id: 2c0e6856-8401-4cc7-c5aa-08def863eabb X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|7416014|366016|10067099003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: jPS34DEBrihG7zq8C5N30uVQ5oS563pSG2FVhsS8en+y4MbcpnMHYUg30qdKnZq8W+Ez50iwlhtjjTE8wPjPec6y8Cm7zkaNMWTMmMbnegCG2ah3A2nwV5sgdVAn1QrNPimJLq+l8RkL6xi32bhutIG0kXfzdcLD3g4jn9Rqz73qY+sGPE4UWt97scglg+KQyo9LxUVXEBcOn/XWzfzgzWKKR+hpojsql0rQkSsb0E7OPNysIV/1Hm8Fj1e598vv94yCjRmpRwIJRPzGUJD/+GqgGkNsRDFsff7tb1IjBZMlT94fl8Bb6625MhTL3TPcfUiMxa7lHmMifwWsc+zysFxn01OGv8wGkf2KL8hqz3kKwLXtZXS46gVT7tCXkWb7L1z91lGNqvlwN2W6DDe65LA2fXZBa8kjouWva3N3dEwF+bw6x96s5vb1lMzNr0VipB+xWCBkmPr/+ow2SY+rqhhXCKBQXxaQNevq5l8F4qembrZhCXy4RqPDzBMicCpDkv3hI9RbdmnpkWM47/goBnDfGL9n0Tggv+p1Hnm13w3bfGz3g9OmA3RYNAp/wvsIg0ccawUOGCke5FalIbq9lF+Endh07WHLeyd4kQU1Ol1tXCtUGxw/mdAFxRw8CzdZAeokcwN8Y4nZ/OhfL434eBrLll1FaukhCbWJZ6mFwtc= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR12MB2370.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(7416014)(366016)(10067099003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?5Z/uXzwnuQHj/oBVV4QUIpgKdZr4NXqWbiY4iD8eouGS2/6Ja2K1agzJI1Ae?= =?us-ascii?Q?xeK3/Yd+7sqW1rtYWZE/GYMHEhDEm8wewH9yGzcmW+dZ3oibZ5Va2AdKL9Gk?= =?us-ascii?Q?43maIYhopN4DdlQ+WFeEGumLgsWc/WQ/+EroCwTvI6vUHesYYrK2fVqnBFDA?= =?us-ascii?Q?9TlM4kOa2uMkRuct8KyVw/nJBHWODnEXN7ohfwJ7Tpmqe7xTjfmxBM53vw10?= =?us-ascii?Q?RX8JAwahlB8oxohRAp82JqJOxoJnrKvVlI5QKPNnll/CMTKcAcdVVTNWXsPB?= =?us-ascii?Q?CxD8hF9Em5jL2/Oqx9WULo3BNcJDWCN+I/lU65MU9tHa/5SeSZGRanoVzBZY?= =?us-ascii?Q?A9F3CKgm2QRL5JZGlRBt0fYVo6GK1mlk3DXWGKXfq8FvbSBii4sZcpczwHzC?= =?us-ascii?Q?R7JW+NkkLpAEdHWNWiisiTrJibxFr5ZUc12BBhkLr6FmGORjC7yfIzRCQF9Z?= =?us-ascii?Q?htoTTZiTKTwGKuzAIhHGZfH1J+lUVQ6FDFKeJL2wihnJ+J6DdOAWdLOLzo82?= =?us-ascii?Q?l+wXfuGi6Nt7URZN+pk2qMRZagWuyeypzaH55lih8Dfb29YN+BHIOO/UD9zr?= =?us-ascii?Q?0wDOh+AtfvyNLTJ9Hocglv6quS/zXFAaMfxuyS86an8++elMVa4C0G3i0kj1?= =?us-ascii?Q?ic5ae3VZIguY/MCpx0yxmfcw66EO/jXXZALwau5MAGA/VPjlqUiTdj4SHchz?= =?us-ascii?Q?1w4qNLuO3QzsMonL1jvnbcuqp9X2y0f/hOr4n/Ah4biuOcIoi0FY7RtBxTAs?= =?us-ascii?Q?kQ20xcw6CCT5l/Snqkl861D7QcPcTc6TRDMbsOEJnsTZaRXpuZfB+Xxil3p8?= =?us-ascii?Q?4R9PSQ3dOrYxDuAVl6E7wAB4aMX3pIJhskIvSsSnAFGx9x6PSaJu4h1/rQNQ?= =?us-ascii?Q?seYFXUyXYrSxiU6xJEiZoT/GiDajk0WMC4uKutJtafbnNTGb1/Q3oXoeGSHS?= =?us-ascii?Q?Yn+VEdm1C79Ej0QkktWh9Q1I4iIuKJxfq+coqy0q4ZrXBTz1KBUbUk+pEANU?= =?us-ascii?Q?DvoNYOUd0NG2D8/1CtZ9WVhfBkDQnz8EKmudQirweh3+BlOAUS+WRebILh8p?= =?us-ascii?Q?+g+6/fwKIwCs8Dp0BCPgD6tojNDVFMXyZos2ig38T8HxxJqJuidezelooV5Q?= =?us-ascii?Q?GgJVu2s+1b/Q44qI7IrI6FUjDQJIKkjWFPLBtyP1K/dquyhbEnG6TRxDJSRX?= =?us-ascii?Q?mY9EvH4JPA97D+b9Zd3Axh2M6gqj3o+sw6oEXgGY9ydjSI5PXMopyrb7nb9M?= =?us-ascii?Q?0Px9+HvB+Stw77xqlD/yyxVdSaav4HBIKNC+Orv8jDolKmlFNqnYPvisb2Zl?= =?us-ascii?Q?QOzuZSNZKNMrzNSmOQzeGOWZmhYikUrHfVz5qTAt5RQS1oKYS3Ar9Ihb+zhX?= =?us-ascii?Q?G8rmXs9VrAIbiOCMnIdCA0GrckF1pjUOw0Ml+pQCKKeoPrZNiGUQpafBn3lV?= =?us-ascii?Q?SRzG2FMPzh6vBUx87C2m5ZNBBvu0oKpakegrz21zQcEx9TKPivBB4GFxcRRX?= =?us-ascii?Q?7dGWkxpmSWP19iBeDUMhu3dTwFVEa6HMcS/z+L9mRXzK93CCJjLvLJP/TZZb?= =?us-ascii?Q?ZJ5S5pd8FcBWjJJbc84jwTkmr1d13UYPmjbkkMNeXpDoTcZA4FdKf4Vx2q6/?= =?us-ascii?Q?x6eMKG1PtULK9mc1YuT0aa/+7ZXJZ/2XCM1b0o4Yuhdr14bO+z9Qg1yZhA8u?= =?us-ascii?Q?44l8MXzkbE47UfrbKGSjPz9eKilL0SbAQCarLSr8V7EwgL5LDGXx/HMegAVU?= =?us-ascii?Q?cOuWh0/olg=3D=3D?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2c0e6856-8401-4cc7-c5aa-08def863eabb X-MS-Exchange-CrossTenant-AuthSource: BL0PR12MB2370.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 11:21:56.1009 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: +1aYTtavzTzYG8NmaPLOyT9d/SrncJ5HHPRXu6P53jD+BKzyMOymO6JIxL1KPaa4oCLvfevhWAv1HMyMZEStzw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR12MB9748 Content-Type: text/plain; charset="utf-8" cxl_get_poison_by_memdev() queries Get Poison List per partition but never checks the result inside the loop, so a later partition's success overwrites an earlier partition's failure and the whole scan reports success while that partition's poison went unlisted. Before the loop conversion the PMEM query returned early on error. Stop the loop on any error not already tolerated as a RAM -EFAULT. Fixes: be5cbd084027 ("cxl: Kill enum cxl_decoder_mode") Signed-off-by: Richard Cheng --- Changelog: v1->v2: - New added patch ( sashiko-bot's report ) --- drivers/cxl/core/memdev.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/drivers/cxl/core/memdev.c b/drivers/cxl/core/memdev.c index b3419df586b9..e39b3d13fd56 100644 --- a/drivers/cxl/core/memdev.c +++ b/drivers/cxl/core/memdev.c @@ -231,6 +231,8 @@ static int cxl_get_poison_by_memdev(struct cxl_memdev *= cxlmd) */ if (rc =3D=3D -EFAULT && cxlds->part[i].mode =3D=3D CXL_PARTMODE_RAM) rc =3D 0; + if (rc) + break; } return rc; } --=20 2.43.0 From nobody Tue Sep 29 04:39:03 2026 Received: from SJ2PR03CU001.outbound.protection.outlook.com (mail-westusazon11012020.outbound.protection.outlook.com [52.101.43.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AEA7343303B; Wed, 12 Aug 2026 11:22:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.43.20 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533727; cv=fail; b=szr0nXV5dwaV8Fsbe7BhEwAmKKWui5x9bx96rU7yBsLECKtV5iHkc6jJBf0Bk0FYoXE7T+bL+m6pf5yEiDdfc05aPRUh84rxGIbqGLUPO4pC6hsc5kR3qhxaFgh0VNAopp3yVNj/lcVUSW2M3C7zMA8dihMwHNSITtx+BHQnZUw= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786533727; c=relaxed/simple; bh=VFmyMXMqg8tcoIgwz6QVEmUkR+eqAEiQ3aDU3Zi0jc4=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: Content-Type:MIME-Version; b=NMpT58pI3tsNhYrta6eqbu1lDEC1ngHEgDceMq6caaeAdfAA/m5LYLjpolIe5EvlaLdGv6+vGcosGAc9lxq+SpK8QZlIkGMzlNtC3oUzWlHcoFQ4F0vBwZrCgVbp23kp4j0bP1DTZxZRCqQKM3N3K+ylaTcl1sydBv38CH7QyDA= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b=oCnEqFY8; arc=fail smtp.client-ip=52.101.43.20 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=Nvidia.com header.i=@Nvidia.com header.b="oCnEqFY8" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=YmkkqTC6tz6ZVsIA6XGItSmPCAj+dWXepBFbmwj2I8hOf+SKQSX7v6HKz+fB6lO++kuiEMUwtUj832kVUWR9ILO3jjss2LgxUn+xY2RLfYGLNrFjdyyxXvbhgk49VEhF/pW3b74Y7nCGa4vQO3NzoSgDoxRcSim2OGcAIh4paieHM6KBCKO3usavODRYKYgotwB0vFnBSaLjB+HFfDZkSXUe/+MAzstSQRD4lcFY7JnaU49G9TlWtbxplmqdtZBnXy4ALf6KlgHnd3lMHv5rlyNCpIWUeStlC5mwsLHzuexe3e6lfOXp8mNQZxFvqSngTh3vI9yjumX58+JvnBqdMw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OJ/w+FgUXkffWxt9iwsNfGAt5njzVP25NtvN6W59nY8=; b=D/e4/goVFjczkegz8GRLX44bFFjErBTjgutMUhG1919wcjizooTr/uxElGKWujDS8fDOHyNEfKVkJkZRR6H25lkwdhTtp8Mag9OFkpaWFSmt4vjix+jmxXwznZheTiCpDwvH7XnA3gl3SfBaQ7933OVB6I0hgid09JmN4YKT/Dq3ZYwwkatsaJmt0fxw2pm5VeCtM+5i+iDd8rD4c+eWAVIvXopVwzdhdTvgN9u30hToLGQEhe9OAHJl7pNlrLJNwUpMxHKF6FaipIR4vaZJw+LexpQ7E7oThP83on6vvWUjkf/4713ZV3oXTX6yMhnZPAS9pElyF9UqqXMAvlTfWg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OJ/w+FgUXkffWxt9iwsNfGAt5njzVP25NtvN6W59nY8=; b=oCnEqFY8NXdiQ6dUFL9csP6HFlImtSTRbPx/oD+FMW4Md7zZXpEGgcwL79sZfpUs60ytB7UeSLighn3KDoJV+hpIZXbg/LhOH72nW7Ff3BCuKndgqWWNQMCXvlOezkkggd5e7a2VVTWS7nlngdpG7aq88moLIlybFdV5kMouXn2KpQRvl3LK5e/U+4zKA7dFFMCODP20oJ2j0Q8XTW+QSXw60qBSWM8xrSCIdg8X+yqBLWAfFskjZQXc/Q480EsRwFbnnTrWWgYcXfdhw3roq9YwUOe5fcuT82sP3OFMnM3Dtm//RUKm74z1UIKS3Y5lheq+/GPQLceAEVeY8JZILA== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) by DS4PR12MB9748.namprd12.prod.outlook.com (2603:10b6:8:29e::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.12; Wed, 12 Aug 2026 11:22:01 +0000 Received: from BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8]) by BL0PR12MB2370.namprd12.prod.outlook.com ([fe80::86cf:c3ec:2cf5:74c8%5]) with mapi id 15.21.0292.024; Wed, 12 Aug 2026 11:22:01 +0000 From: Richard Cheng To: dave@stgolabs.net, jic23@kernel.org, dave.jiang@intel.com, alison.schofield@intel.com, vishal.l.verma@intel.com Cc: iweiny@kernel.org, ming.li@zohomail.com, gourry@gourry.net, rrichter@amd.com, linux-cxl@vger.kernel.org, linux-kernel@vger.kernel.org, kees@kernel.org, newtonl@nvidia.com, kristinc@nvidia.com, kaihengf@nvidia.com, kobak@nvidia.com, Richard Cheng Subject: [PATCH v4 6/6] cxl/region: Reject poison scan for decoder without a partition Date: Wed, 12 Aug 2026 19:21:07 +0800 Message-ID: <20260812112107.56181-7-icheng@nvidia.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260812112107.56181-1-icheng@nvidia.com> References: <20260812112107.56181-1-icheng@nvidia.com> Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: TPYP295CA0026.TWNP295.PROD.OUTLOOK.COM (2603:1096:7d0:a::20) To BL0PR12MB2370.namprd12.prod.outlook.com (2603:10b6:207:47::27) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL0PR12MB2370:EE_|DS4PR12MB9748:EE_ X-MS-Office365-Filtering-Correlation-Id: be7b0d09-3bcd-47ea-f938-08def863ee35 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|7416014|366016|6133799003|10067099003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR12MB2370.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(7416014)(366016)(6133799003)(10067099003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?/MHH5Ra1fy4HsQVbCvFGIN9+19Hm33NOV+gB+D5zmkIPD3lB7iuTBKLtdnBF?= =?us-ascii?Q?AyQfwiKkjGn6bV1QnvUwN11UMRolsm1p13k7LY/9wNkhflQYfM1RsDzjJxMU?= =?us-ascii?Q?HgFrvoYR/Y3z7qoe1hOs9ATlJ/8TuORTmZBV7kq2qVuBK5miiamHW39j2nqT?= =?us-ascii?Q?h77ccqUPnBxS+bOFFZxKDi1i1YqSglu9/GcTJRRKe8qorALe6U1/o2vtF5SW?= =?us-ascii?Q?ZQi7UsU5kWko7ViOObxPB8/5LouG3cjcnAyC1aTGs2Rrq3KC2GkOmp1Y0U1p?= =?us-ascii?Q?VPDHwRSZXyO9Mxl+c5Odi79StG5Ilj53/39cpBeqwSrBmsdZI5oB7Ic6ta39?= =?us-ascii?Q?7OY78dc8GIm9sJjKbxfgHmeZaRyOCrbNG8+e32ZdHZsEzjfnKyeutUnVd6rt?= =?us-ascii?Q?tEG6Fd7w8vQdT4AgQvEKiPKQ36Tg9MN7OoA3Mwfj8xNJXIH19158Xdol+QMJ?= =?us-ascii?Q?5MCvxho19HwhVi2iYsaoauPEsdRvqVeuFU7ld96KWEDBSSo8De2Z0AGCKO4W?= =?us-ascii?Q?aYEBlGHT7a9k/OvnfR9p1NBLXk+YC+VRJCP8d4aBoM3J6bYx8HfE0qA6wS7w?= =?us-ascii?Q?D8qvVDG6tyaMT5XnBiLTE6TB/L+JDUidFrE0EjIaD6f5rRac+FOeEich9Kse?= =?us-ascii?Q?6RPGOp2B2WTp47HrQWgpziKhvTVmgW/HTrc00WhN4Txmcd4iveHYivmQM/pt?= =?us-ascii?Q?m1lr01rGsWjApxMXwNqAe1ieb7TWKLKCpQtmXAoDAGub8frun1Xr8TX5AhpJ?= =?us-ascii?Q?CQQVkcv82wKxhcc2uJGPG+2FmQ4OKY3OtHGLtzURSC6s7IOFd6ArLIq6viTW?= =?us-ascii?Q?p01iRvc0wOTXKYYJkWp9uOXgKPiWlnZ+hwpHHDlXnIdv94efFRR19WJYoq4U?= =?us-ascii?Q?5BVDqbLpl4G9TEl5n36ji97ySR5IrjepVspp2sECGAGFVA3ABk4SQlLbmdnG?= =?us-ascii?Q?/e9+0EUJ9xGlXU6DAlD4+yl55lGZLOrhkRKbHijnC8SLlp+Ll3q9MJ/On6d0?= =?us-ascii?Q?I0En8/4/yr0PHOa48jWtlsoBOptu0E7g0/lbqbXmMA3pSr1mF4xQjWz9uQGr?= =?us-ascii?Q?+ATKaNCVBSlA2amTN7i47TeEEYKHzXChdmtnedYSTrUvN3bN9p/gkaNCD37H?= =?us-ascii?Q?Kbok2HB6aGVITBsousaoosO1dOMBky7z+BiCfCndxOu66XV8RpqP45dZdvnG?= =?us-ascii?Q?704V8bgdPZhoyElQI7MBJ+ktWPGDJjSAYZNa9XA4tPqG1himeC3deyjeoaYa?= =?us-ascii?Q?EXtsx2UTge4ip/ulqBVrsEjc6vkKyzQxoKqmsA12a0evV/AZ5EptNwgJWdtZ?= =?us-ascii?Q?8zROLAFBgauYX7efotarMAHQ9Ij5KT/R/L/Q7nCpjAoUA0Munevj/eXRaTdZ?= =?us-ascii?Q?mRsWBF32sLSWSleG2436to4pDpvpitPpq3C6aLpEAX9u/YBr8MUxIEiUp6En?= =?us-ascii?Q?Bp+UuHGThfD5vCbgpot8MrgasPsdDYtarMqgb1SBDWPIYIFioDwXsP6Q3ZP/?= =?us-ascii?Q?sZ7KXmoYyxtrvY+Vx9qbbWySKplDJ6FurmjBa5T0n/atvINrs4lCJ4uELa/9?= =?us-ascii?Q?HSF46NtoaDTpubu7v/mVzZLYl8mcKbkmOMxmDH0yPlloXigCSP30EM4T7zkY?= =?us-ascii?Q?G0YurrpfU+Hf4E0qAh6c6v/YIzik8x9l9n6jBn4WHoorOQbeA9hBKRSDPSUq?= =?us-ascii?Q?nNXJtGK1BQY+YHUOcITwLssJeAg7DYFyZwQouwL4wb3p98Y6dV05jDambp48?= =?us-ascii?Q?fsyHcwpr6Q=3D=3D?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: be7b0d09-3bcd-47ea-f938-08def863ee35 X-MS-Exchange-CrossTenant-AuthSource: BL0PR12MB2370.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Aug 2026 11:22:01.8495 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: c1jO/nV5fJNiysvo1Hjz+BlpfnOGoNl93Yhfwh5XBCStHs8/fe1AEPZMMAZEABYvSPxNOKOv+ru3mtvB9ucYEQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS4PR12MB9748 Content-Type: text/plain; charset="utf-8" __cxl_dpa_reserve() may leave cxled->part at -1 when a decoder's DPA range doesn't map to any reported partition, while still keeping dpa_res. poison_by_decoder() then indexes cxlds->part[-1], causing an out-of-bounds read when poison collection is triggered. Return -ENODEV before accessing the partition array when no partition was assigned. Fixes: be5cbd084027 ("cxl: Kill enum cxl_decoder_mode") Signed-off-by: Richard Cheng --- drivers/cxl/core/region.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/drivers/cxl/core/region.c b/drivers/cxl/core/region.c index b7dc5d4988da..afe3fb57b7fe 100644 --- a/drivers/cxl/core/region.c +++ b/drivers/cxl/core/region.c @@ -2954,6 +2954,8 @@ static int poison_by_decoder(struct device *dev, void= *arg) cxled =3D to_cxl_endpoint_decoder(dev); if (!cxled->dpa_res) return rc; + if (cxled->part < 0) + return -ENODEV; =20 cxlmd =3D cxled_to_memdev(cxled); cxlds =3D cxlmd->cxlds; --=20 2.43.0