Florian Schmaus 22aa7d1631 kunit: test_dev_action: Correctly cast 'priv' pointer to long* ...

[ Upstream commit 2551a1eedc ]

The previous implementation incorrectly assumed the original type of
'priv' was void**, leading to an unnecessary and misleading
cast. Correct the cast of the 'priv' pointer in test_dev_action() to
its actual type, long*, removing an unnecessary cast.

As an additional benefit, this fixes an out-of-bounds CHERI fault on
hardware with architectural capabilities. The original implementation
tried to store a capability-sized pointer using the priv
pointer. However, the priv pointer's capability only granted access to
the memory region of its original long type, leading to a bounds
violation since the size of a long is smaller than the size of a
capability. This change ensures that the pointer usage respects the
capabilities' bounds.

Link: https://lore.kernel.org/r/20251017092814.80022-1-florian.schmaus@codasip.com
Fixes: d03c720e03 ("kunit: Add APIs for managing devices")
Reviewed-by: David Gow <davidgow@google.com>
Signed-off-by: Florian Schmaus <florian.schmaus@codasip.com>
Signed-off-by: Shuah Khan <skhan@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-11-13 15:33:57 -05:00

..

.kunitconfig

…

assert_test.c

…

assert.c

…

attributes.c

…

debugfs.c

kunit: string-stream: Fix a UAF bug in kunit_init_suite()

2024-12-09 10:41:01 +01:00

debugfs.h

…

device-impl.h

…

device.c

…

executor_test.c

…

executor.c

…

hooks-impl.h

…

hooks.c

…

Kconfig

…

kunit-example-test.c

…

kunit-test.c

kunit: test_dev_action: Correctly cast 'priv' pointer to long*

2025-11-13 15:33:57 -05:00

Makefile

…

platform-test.c

…

platform.c

…

resource.c

…

static_stub.c

kunit: Fix wrong parameter to kunit_deactivate_static_stub()

2025-06-19 15:31:30 +02:00

string-stream-test.c

…

string-stream.c

…

string-stream.h

…

test.c

…

try-catch-impl.h

…

try-catch.c

…

user_alloc.c

…