[PATCH -next] KVM: arm64: Fix possible null-ptr-deref in idregs_debug_show
cuigaosheng
cuigaosheng1 at huawei.com
Mon Oct 28 20:58:14 PDT 2024
On 2024/10/24 17:29, Marc Zyngier wrote:
> On Thu, 24 Oct 2024 09:33:50 +0100,
> Gaosheng Cui <cuigaosheng1 at huawei.com> wrote:
>> The idregs_debug_show() maybe return nullptr, we need to check desc
>> before dereference it to avoid possible null pointer dereferences.
>>
>> Fixes: 410db103f6eb ("KVM: arm64: Make idregs debugfs iterator search sysreg table directly")
>> Signed-off-by: Gaosheng Cui <cuigaosheng1 at huawei.com>
>> ---
>> arch/arm64/kvm/sys_regs.c | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/arch/arm64/kvm/sys_regs.c b/arch/arm64/kvm/sys_regs.c
>> index ff8c4e1b847e..b1c59773b9c0 100644
>> --- a/arch/arm64/kvm/sys_regs.c
>> +++ b/arch/arm64/kvm/sys_regs.c
>> @@ -4135,7 +4135,7 @@ static int idregs_debug_show(struct seq_file *s, void *v)
>>
>> desc = idregs_debug_find(kvm, kvm->arch.idreg_debugfs_iter);
>>
>> - if (!desc->name)
>> + if (!desc || !desc->name)
>> return 0;
>>
>> seq_printf(s, "%20s:\t%016llx\n",
> Can you show a case where this happens in practice?
>
> The check for NULL is already in idregs_debug_next(), and I don't see
> how this can actually be triggered.
I haven't found a scenario that can trigger this problem,this patch was
discovered during code review,I will try to prove it.
Thanks for your work.
>
> Thanks,
>
> M.
>
More information about the linux-arm-kernel
mailing list