From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <vladz@cloudius-systems.com>
Received: from mail-wi0-f170.google.com (mail-wi0-f170.google.com
 [209.85.212.170]) by dpdk.org (Postfix) with ESMTP id 5A4895697
 for <dev@dpdk.org>; Tue,  6 Oct 2015 18:40:44 +0200 (CEST)
Received: by wicgb1 with SMTP id gb1so173941245wic.1
 for <dev@dpdk.org>; Tue, 06 Oct 2015 09:40:44 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:subject:to:references:cc:from:message-id:date
 :user-agent:mime-version:in-reply-to:content-type
 :content-transfer-encoding;
 bh=aJKrNYwQr6bfwfiePaTfR4Hyb3xutIX467zJmgkdGng=;
 b=jkoaqMXPjFnel5zweYk0v0M6RTqdlvDICWyZMxBhPk4InouR5sVM7C8iBXELzy3+21
 xYjanUXX5/dQg9I9mg4Jc2j66IXRs7NzkOequTDRI44xYeMWn7l35six6CLGACzh3TsM
 6er59ipCKE9FQJkLsnPTegXO5Z7YhyL2P+jpDjDI4xKq1O6uvjDx4JCxUXvA4yUlbbvH
 R+EAXQvxCs5eEfc200d9gRVTdZ1nNNGoFjpBwKB4Q7uo+VQFZrwB/R40zVk5VoK3+B2a
 F3xjYdMLJJPor3bWH0BPVL4ZPv091tuMOLekpjuJzut/xjrW02A+Y9190jnooknP9UNs
 lJRA==
X-Gm-Message-State: ALoCoQmDo6mV9Wiy/yHZm+XUewD03va9a4zAbbS6Eaz824gPjmGR6Qb6S43lKDxDlF+bVrltsgei
X-Received: by 10.180.39.139 with SMTP id p11mr17347921wik.44.1444149643698;
 Tue, 06 Oct 2015 09:40:43 -0700 (PDT)
Received: from [10.0.0.171] ([37.142.229.250])
 by smtp.googlemail.com with ESMTPSA id h7sm33543837wjz.7.2015.10.06.09.40.42
 (version=TLSv1/SSLv3 cipher=OTHER);
 Tue, 06 Oct 2015 09:40:42 -0700 (PDT)
To: "Michael S. Tsirkin" <mst@redhat.com>
References: <1443652138-31782-1-git-send-email-stephen@networkplumber.org>
 <1443652138-31782-3-git-send-email-stephen@networkplumber.org>
 <20151001104505-mutt-send-email-mst@redhat.com>
 <20151005215455.GA7608@redhat.com>
 <CAOYyTHZHdS4Hr7Qq5FOdDMtooAKiAb26efAJ=NaxyMVqkYqiHQ@mail.gmail.com>
 <20151006013000-mutt-send-email-mst@redhat.com>
 <561384EF.8020100@cloudius-systems.com>
 <20151006164259-mutt-send-email-mst@redhat.com>
 <5613DF71.7090207@cloudius-systems.com>
 <20151006175634-mutt-send-email-mst@redhat.com>
From: Vlad Zolotarov <vladz@cloudius-systems.com>
Message-ID: <5613F989.6010503@cloudius-systems.com>
Date: Tue, 6 Oct 2015 19:40:41 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.1.0
MIME-Version: 1.0
In-Reply-To: <20151006175634-mutt-send-email-mst@redhat.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
Cc: dev@dpdk.org, hjk@hansjkoch.de, gregkh@linux-foundation.org,
 linux-kernel@vger.kernel.org
Subject: Re: [dpdk-dev] [PATCH 2/2] uio: new driver to support PCI MSI-X
X-BeenThere: dev@dpdk.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: patches and discussions about DPDK <dev.dpdk.org>
List-Unsubscribe: <http://dpdk.org/ml/options/dev>,
 <mailto:dev-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://dpdk.org/ml/archives/dev/>
List-Post: <mailto:dev@dpdk.org>
List-Help: <mailto:dev-request@dpdk.org?subject=help>
List-Subscribe: <http://dpdk.org/ml/listinfo/dev>,
 <mailto:dev-request@dpdk.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Oct 2015 16:40:44 -0000



On 10/06/15 18:00, Michael S. Tsirkin wrote:
> On Tue, Oct 06, 2015 at 05:49:21PM +0300, Vlad Zolotarov wrote:
>>> and read/write the config space.
>>> This means that a single userspace bug is enough to corrupt kernel
>>> memory.
>> Could u, pls., provide and example of this simple bug? Because it's
>> absolutely not obvious...
> Stick a value that happens to match a kernel address in Msg Addr field
> in an unmasked MSI-X entry.

This patch neither configures MSI-X entries in the user space nor 
provides additional means to do so therefore this "sticking" would be a 
matter of some extra code that is absolutely unrelated to this patch. 
So, this example seems absolutely irrelevant to this particular discussion.

thanks,
vlad

>