All of lore.kernel.org
 help / color / mirror / Atom feed
From: Florian Fainelli <f.fainelli@gmail.com>
To: Marc Zyngier <maz@kernel.org>, Florian Fainelli <f.fainelli@gmail.com>
Cc: linux-kernel@vger.kernel.org,
	bcm-kernel-feedback-list@broadcom.com,
	Thomas Gleixner <tglx@linutronix.de>,
	Jason Cooper <jason@lakedaemon.net>
Subject: Re: [PATCH] irqchip/gic: Check interrupt type validity
Date: Tue, 10 Dec 2019 12:25:07 -0800	[thread overview]
Message-ID: <16017d14-8324-c9d0-b8e9-beec7473268d@gmail.com> (raw)
In-Reply-To: <20191116133508.25234f26@why>

On 11/16/19 5:35 AM, Marc Zyngier wrote:
> On Wed, 23 Oct 2019 12:56:19 -0700
> Florian Fainelli <f.fainelli@gmail.com> wrote:
> 
>> In case the interrupt property specifies a type parameter that is not
>> GIC_SPI (0) or GIC_PPIC (1), do not attempt to translate the interrupt
>> and return -EINVAL instead.
>>
>> Fixes: f833f57ff254 ("irqchip: Convert all alloc/xlate users from of_node to fwnode")
>> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
>> ---
>> Marc,
>>
>> Regardless of whether my attempt to use SGI moves any further, this
>> seems appropriate to do since we should not be trying to translate
>> incorrectly specified interrupts. Thanks!
>>
>>  drivers/irqchip/irq-gic.c | 3 +++
>>  1 file changed, 3 insertions(+)
>>
>> diff --git a/drivers/irqchip/irq-gic.c b/drivers/irqchip/irq-gic.c
>> index 30ab623343d3..fc47e655618d 100644
>> --- a/drivers/irqchip/irq-gic.c
>> +++ b/drivers/irqchip/irq-gic.c
>> @@ -1005,6 +1005,9 @@ static int gic_irq_domain_translate(struct irq_domain *d,
>>  		if (fwspec->param_count < 3)
>>  			return -EINVAL;
>>  
>> +		if (fwspec->param[0] > 1)
>> +			return -EINVAL;
>> +
>>  		/* Get the interrupt number and add 16 to skip over SGIs */
>>  		*hwirq = fwspec->param[1] + 16;
>>  
> 
> I'm in two minds about this.
> 
> The usual stance is that the kernel is not a validation suite for DT
> files, but on the other hand we already do some of that two lines above
> (a consequence of kernel and DT binding lockstep development...). Do we
> really want to add more of this? Or should we put more effort in static
> validation of DT files and actually remove these checks?


Static validation is nice for DTS that live in the tree, if you have a
platform that provides the FDT via firmware, and that firmware is handed
over to a variety of people, who knows what they can do. My inclination
would be to perform that check which is not costly and guarantees we
don't feed garbage to the GIC driver.
-- 
Florian

      reply	other threads:[~2019-12-10 20:25 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-10-23 19:56 [PATCH] irqchip/gic: Check interrupt type validity Florian Fainelli
2019-11-15 22:32 ` Florian Fainelli
2019-11-16 13:35 ` Marc Zyngier
2019-12-10 20:25   ` Florian Fainelli [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=16017d14-8324-c9d0-b8e9-beec7473268d@gmail.com \
    --to=f.fainelli@gmail.com \
    --cc=bcm-kernel-feedback-list@broadcom.com \
    --cc=jason@lakedaemon.net \
    --cc=linux-kernel@vger.kernel.org \
    --cc=maz@kernel.org \
    --cc=tglx@linutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.