* [PATCH v3] x86/mce: retrieve poison range from hardware
@ 2022-07-17 23:48 Jane Chu
2022-07-18 16:19 ` Luck, Tony
0 siblings, 1 reply; 6+ messages in thread
From: Jane Chu @ 2022-07-17 23:48 UTC (permalink / raw)
To: tony.luck, bp, tglx, mingo, dave.hansen, x86, linux-edac,
dan.j.williams, linux-kernel, hch, nvdimm
With Commit 7917f9cdb503 ("acpi/nfit: rely on mce->misc to determine
poison granularity") that changed nfit_handle_mce() callback to report
badrange according to 1ULL << MCI_MISC_ADDR_LSB(mce->misc), it's been
discovered that the mce->misc LSB field is 0x1000 bytes, hence injecting
2 back-to-back poisons and the driver ends up logging 8 badblocks,
because 0x1000 bytes is 8 512-byte.
Dan Williams noticed that apei_mce_report_mem_error() hardcode
the LSB field to PAGE_SHIFT instead of consulting the input
struct cper_sec_mem_err record. So change to rely on hardware whenever
support is available.
Link: https://lore.kernel.org/r/7ed50fd8-521e-cade-77b1-738b8bfb8502@oracle.com
Reviewed-by: Dan Williams <dan.j.williams@intel.com>
Signed-off-by: Jane Chu <jane.chu@oracle.com>
---
arch/x86/kernel/cpu/mce/apei.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/arch/x86/kernel/cpu/mce/apei.c b/arch/x86/kernel/cpu/mce/apei.c
index 717192915f28..a8274fd57add 100644
--- a/arch/x86/kernel/cpu/mce/apei.c
+++ b/arch/x86/kernel/cpu/mce/apei.c
@@ -37,7 +37,7 @@ void apei_mce_report_mem_error(int severity, struct cper_sec_mem_err *mem_err)
m.bank = -1;
/* Fake a memory read error with unknown channel */
m.status = MCI_STATUS_VAL | MCI_STATUS_EN | MCI_STATUS_ADDRV | MCI_STATUS_MISCV | 0x9f;
- m.misc = (MCI_MISC_ADDR_PHYS << 6) | PAGE_SHIFT;
+ m.misc = (MCI_MISC_ADDR_PHYS << 6) | __ffs64(mem_err->physical_addr_mask);
if (severity >= GHES_SEV_RECOVERABLE)
m.status |= MCI_STATUS_UC;
--
2.18.4
^ permalink raw reply related [flat|nested] 6+ messages in thread
* RE: [PATCH v3] x86/mce: retrieve poison range from hardware
2022-07-17 23:48 [PATCH v3] x86/mce: retrieve poison range from hardware Jane Chu
@ 2022-07-18 16:19 ` Luck, Tony
2022-07-18 19:15 ` Dan Williams
0 siblings, 1 reply; 6+ messages in thread
From: Luck, Tony @ 2022-07-18 16:19 UTC (permalink / raw)
To: Jane Chu, bp, tglx, mingo, dave.hansen, x86, linux-edac,
Williams, Dan J, linux-kernel, hch, nvdimm
+ m.misc = (MCI_MISC_ADDR_PHYS << 6) | __ffs64(mem_err->physical_addr_mask);
Do we want to unconditionally trust the sanity of the BIOS provided physical_address_mask?
There's a warning comment on the kernel __ffs64() function:
* The result is not defined if no bits are set, so check that @word
* is non-zero before calling this.
Otherwise, this looks like a good idea.
-Tony
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: [PATCH v3] x86/mce: retrieve poison range from hardware
2022-07-18 16:19 ` Luck, Tony
@ 2022-07-18 19:15 ` Dan Williams
2022-07-18 19:22 ` Luck, Tony
0 siblings, 1 reply; 6+ messages in thread
From: Dan Williams @ 2022-07-18 19:15 UTC (permalink / raw)
To: Luck, Tony, chu, jane, bp, tglx, mingo, dave.hansen, x86,
linux-edac, Williams, Dan J, linux-kernel, hch, nvdimm
Luck, Tony wrote:
> +m.misc = (MCI_MISC_ADDR_PHYS << 6) | __ffs64(mem_err->physical_addr_mask);
>
> Do we want to unconditionally trust the sanity of the BIOS provided physical_address_mask?
>
> There's a warning comment on the kernel __ffs64() function:
>
> * The result is not defined if no bits are set, so check that @word
> * is non-zero before calling this.
>
> Otherwise, this looks like a good idea.
It appears the kernel is trusting that ->physical_addr_mask is non-zero
in other paths. So this is at least equally broken in the presence of a
broken BIOS. The impact is potentially larger though with this change,
so it might be a good follow-on patch to make sure that
->physical_addr_mask gets fixed up to a minimum mask value.
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: [PATCH v3] x86/mce: retrieve poison range from hardware
2022-07-18 19:15 ` Dan Williams
@ 2022-07-18 19:22 ` Luck, Tony
2022-07-18 21:11 ` Jane Chu
0 siblings, 1 reply; 6+ messages in thread
From: Luck, Tony @ 2022-07-18 19:22 UTC (permalink / raw)
To: Williams, Dan J, chu, jane, bp, tglx, mingo, dave.hansen, x86,
linux-edac, linux-kernel, hch, nvdimm
> It appears the kernel is trusting that ->physical_addr_mask is non-zero
> in other paths. So this is at least equally broken in the presence of a
> broken BIOS. The impact is potentially larger though with this change,
> so it might be a good follow-on patch to make sure that
> ->physical_addr_mask gets fixed up to a minimum mask value.
Agreed. Separate patch to sanitize early, so other kernel code can just use it.
-Tony
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH v3] x86/mce: retrieve poison range from hardware
2022-07-18 19:22 ` Luck, Tony
@ 2022-07-18 21:11 ` Jane Chu
2022-07-18 21:37 ` Luck, Tony
0 siblings, 1 reply; 6+ messages in thread
From: Jane Chu @ 2022-07-18 21:11 UTC (permalink / raw)
To: Luck, Tony, Williams, Dan J, bp, tglx, mingo, dave.hansen, x86,
linux-edac, linux-kernel, hch, nvdimm
On 7/18/2022 12:22 PM, Luck, Tony wrote:
>> It appears the kernel is trusting that ->physical_addr_mask is non-zero
>> in other paths. So this is at least equally broken in the presence of a
>> broken BIOS. The impact is potentially larger though with this change,
>> so it might be a good follow-on patch to make sure that
>> ->physical_addr_mask gets fixed up to a minimum mask value.
>
> Agreed. Separate patch to sanitize early, so other kernel code can just use it.
>
Is it possible that with
if (mem->validation_bits & CPER_MEM_VALID_PA_MASK)
the ->physical_addr_mask is still untrustworthy?
include/ras/ras_event.h has this
if (mem->validation_bits & CPER_MEM_VALID_PA_MASK)
__entry->pa_mask_lsb =
(u8)__ffs64(mem->physical_addr_mask);
else
__entry->pa_mask_lsb = ~0;
which hints otherwise.
apei_mce_report_mem_error() already checks mem->validation_bits
up front.
thanks!
-jane
> -Tony
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH v3] x86/mce: retrieve poison range from hardware
2022-07-18 21:11 ` Jane Chu
@ 2022-07-18 21:37 ` Luck, Tony
0 siblings, 0 replies; 6+ messages in thread
From: Luck, Tony @ 2022-07-18 21:37 UTC (permalink / raw)
To: Jane Chu
Cc: Williams, Dan J, bp, tglx, mingo, dave.hansen, x86, linux-edac,
linux-kernel, hch, nvdimm
On Mon, Jul 18, 2022 at 09:11:33PM +0000, Jane Chu wrote:
> On 7/18/2022 12:22 PM, Luck, Tony wrote:
> >> It appears the kernel is trusting that ->physical_addr_mask is non-zero
> >> in other paths. So this is at least equally broken in the presence of a
> >> broken BIOS. The impact is potentially larger though with this change,
> >> so it might be a good follow-on patch to make sure that
> >> ->physical_addr_mask gets fixed up to a minimum mask value.
> >
> > Agreed. Separate patch to sanitize early, so other kernel code can just use it.
> >
>
> Is it possible that with
> if (mem->validation_bits & CPER_MEM_VALID_PA_MASK)
> the ->physical_addr_mask is still untrustworthy?
The validation_bits just show which fields the BIOS *says* it filled in.
If a validation bit isn't set, then Linux should certainly ignore that
field. But if it is set, then Linux needs to decide whether to use the
value, or do a sanity check first.
-Tony
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2022-07-18 21:37 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-07-17 23:48 [PATCH v3] x86/mce: retrieve poison range from hardware Jane Chu
2022-07-18 16:19 ` Luck, Tony
2022-07-18 19:15 ` Dan Williams
2022-07-18 19:22 ` Luck, Tony
2022-07-18 21:11 ` Jane Chu
2022-07-18 21:37 ` Luck, Tony
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.