Differential D55369

arm64 iommu: fixes
Needs ReviewPublic
Actions

Authored by br on Thu, Feb 19, 2:37 PM.

Tags

None

Referenced Files

	F145558501: D55369.diff
	Sat, Feb 21, 11:26 AM

	Unknown Object (File)
	Thu, Feb 19, 4:11 PM

Subscribers

Details

Reviewers

andrew
manu

Summary

fix use after free (dereference of ioctx after freeing it)
tag is destroyed by iommu_bus_dma_tag_destroy() after calling to iommu_free_ctx_locked() here https://github.com/freebsd/freebsd-src/blob/main/sys/dev/iommu/busdma_iommu.c#L450

Test Plan

Tested on RISC-V IOMMU

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

br created this revision.Thu, Feb 19, 2:37 PM

Herald added a reviewer: manu. · View Herald TranscriptThu, Feb 19, 2:37 PM

Herald added a subscriber: emaste. · View Herald Transcript

br requested review of this revision.Thu, Feb 19, 2:37 PM

Revision Contents
Changeset List

Path

Size

sys/

arm64/

iommu/

10 lines

Diff 172232

sys/arm64/iommu/iommu.c

Loading...