next: BUG: KASAN: slab-out-of-bounds in acpi_power_up_if_adr_present

next: BUG: KASAN: slab-out-of-bounds in acpi_power_up_if_adr_present

[Randy Dunlap]

[-- Attachment #1: Type: text/plain, Size: 623 bytes --]

Hi,

I'm hitting $Subject bug on a Dell Inspiron laptop during boot.

faddr2line says that it's here:

	adev = to_acpi_device(dev);
	if (!(adev->flags.power_manageable && adev->pnp.type.bus_address)) // <<<<< HERE
		return 0;


[    1.710103] BUG: KASAN: slab-out-of-bounds in acpi_power_up_if_adr_present+0x17f/0x1d0
[    1.710106] Read of size 1 at addr ffff888106016e0c by task swapper/0/1

[    1.710110] CPU: 4 PID: 1 Comm: swapper/0 Not tainted 5.18.0-rc4-next-20220428 #1 // <<<<< VERSION
[    1.710112] Hardware name: Dell Inc. Inspiron 15 5510/076F7Y, BIOS 2.6.1 12/15/2021


Full boot log is attached.

-- 
~Randy

[-- Attachment #2: boot-next22428-acpibug.log.gz --]
[-- Type: application/gzip, Size: 49128 bytes --]

Re: next: BUG: KASAN: slab-out-of-bounds in acpi_power_up_if_adr_present

[Randy Dunlap]

On 4/28/22 22:43, Randy Dunlap wrote:
> Hi,
> 
> I'm hitting $Subject bug on a Dell Inspiron laptop during boot.
> 
> faddr2line says that it's here:
> 
> 	adev = to_acpi_device(dev);
> 	if (!(adev->flags.power_manageable && adev->pnp.type.bus_address)) // <<<<< HERE
> 		return 0;
> 
> 
> [    1.710103] BUG: KASAN: slab-out-of-bounds in acpi_power_up_if_adr_present+0x17f/0x1d0
> [    1.710106] Read of size 1 at addr ffff888106016e0c by task swapper/0/1
> 
> [    1.710110] CPU: 4 PID: 1 Comm: swapper/0 Not tainted 5.18.0-rc4-next-20220428 #1 // <<<<< VERSION
> [    1.710112] Hardware name: Dell Inc. Inspiron 15 5510/076F7Y, BIOS 2.6.1 12/15/2021
> 
> 
> Full boot log is attached.
> 

This problem goes away when I load the i915 firmware update during
early boot.

-- 
~Randy

Re: next: BUG: KASAN: slab-out-of-bounds in acpi_power_up_if_adr_present

[Rafael J. Wysocki]

On Sat, Apr 30, 2022 at 7:41 PM Randy Dunlap <rdunlap@infradead.org> wrote:
>
>
>
> On 4/28/22 22:43, Randy Dunlap wrote:
> > Hi,
> >
> > I'm hitting $Subject bug on a Dell Inspiron laptop during boot.
> >
> > faddr2line says that it's here:
> >
> >       adev = to_acpi_device(dev);
> >       if (!(adev->flags.power_manageable && adev->pnp.type.bus_address)) // <<<<< HERE
> >               return 0;

This should be addressed by commit 10fa1b2cdc89 ("ACPI: bus: Avoid
non-ACPI device objects in walks over children").