Commit 179af575 authored by WANG Xuerui's avatar WANG Xuerui Committed by Huacai Chen

LoongArch: KVM: Fix input validation of _kvm_get_cpucfg() & kvm_check_cpucfg()

The range check for the CPUCFG ID is wrong (should have been a ||
instead of &&) and useless in effect, so fix the obvious mistake.

Furthermore, the juggling of the temp return value is unnecessary,
because it is semantically equivalent and more readable to just
return at every switch case's end. This is done too to avoid potential
bugs in the future related to the unwanted complexity.

Also, the return value of _kvm_get_cpucfg is meant to be checked, but
this was not done, so bad CPUCFG IDs wrongly fall back to the default
case and 0 is incorrectly returned; check the return value to fix the
UAPI behavior.

While at it, also remove the redundant range check in kvm_check_cpucfg,
because out-of-range CPUCFG IDs are already rejected by the -EINVAL
as returned by _kvm_get_cpucfg().

Fixes: db1ecca2 ("LoongArch: KVM: Add LSX (128bit SIMD) support")
Fixes: 118e10cd ("LoongArch: KVM: Add LASX (256bit SIMD) support")
Reviewed-by: default avatarBibo Mao <maobibo@loongson.cn>
Signed-off-by: default avatarWANG Xuerui <git@xen0n.name>
Signed-off-by: default avatarHuacai Chen <chenhuacai@loongson.cn>
parent f661ca40
...@@ -300,9 +300,7 @@ static int _kvm_setcsr(struct kvm_vcpu *vcpu, unsigned int id, u64 val) ...@@ -300,9 +300,7 @@ static int _kvm_setcsr(struct kvm_vcpu *vcpu, unsigned int id, u64 val)
static int _kvm_get_cpucfg(int id, u64 *v) static int _kvm_get_cpucfg(int id, u64 *v)
{ {
int ret = 0; if (id < 0 || id >= KVM_MAX_CPUCFG_REGS)
if (id < 0 && id >= KVM_MAX_CPUCFG_REGS)
return -EINVAL; return -EINVAL;
switch (id) { switch (id) {
...@@ -324,32 +322,35 @@ static int _kvm_get_cpucfg(int id, u64 *v) ...@@ -324,32 +322,35 @@ static int _kvm_get_cpucfg(int id, u64 *v)
if (cpu_has_lasx) if (cpu_has_lasx)
*v |= CPUCFG2_LASX; *v |= CPUCFG2_LASX;
break; return 0;
default: default:
ret = -EINVAL; /*
break; * No restrictions on other valid CPUCFG IDs' values, but
* CPUCFG data is limited to 32 bits as the LoongArch ISA
* manual says (Volume 1, Section 2.2.10.5 "CPUCFG").
*/
*v = U32_MAX;
return 0;
} }
return ret;
} }
static int kvm_check_cpucfg(int id, u64 val) static int kvm_check_cpucfg(int id, u64 val)
{ {
u64 mask; int ret;
int ret = 0; u64 mask = 0;
if (id < 0 && id >= KVM_MAX_CPUCFG_REGS)
return -EINVAL;
if (_kvm_get_cpucfg(id, &mask)) ret = _kvm_get_cpucfg(id, &mask);
if (ret)
return ret; return ret;
if (val & ~mask)
/* Unsupported features and/or the higher 32 bits should not be set */
return -EINVAL;
switch (id) { switch (id) {
case 2: case 2:
/* CPUCFG2 features checking */ /* CPUCFG2 features checking */
if (val & ~mask) if (!(val & CPUCFG2_LLFTP))
/* The unsupported features should not be set */
ret = -EINVAL;
else if (!(val & CPUCFG2_LLFTP))
/* The LLFTP must be set, as guest must has a constant timer */ /* The LLFTP must be set, as guest must has a constant timer */
ret = -EINVAL; ret = -EINVAL;
else if ((val & CPUCFG2_FP) && (!(val & CPUCFG2_FPSP) || !(val & CPUCFG2_FPDP))) else if ((val & CPUCFG2_FP) && (!(val & CPUCFG2_FPSP) || !(val & CPUCFG2_FPDP)))
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment