[Intel-gfx] [PATCH v2] iommu/vt-d: fix overflow of iommu->domains array

[Joerg Roedel]

On Mon, Jun 06, 2016 at 02:20:11PM +0200, Jan Niehusmann wrote:
> The valid range of 'did' in get_iommu_domain(*iommu, did)
> is 0..cap_ndoms(iommu->cap), so don't exceed that
> range in free_all_cpu_cached_iovas().
> 
> The user-visible impact of the out-of-bounds access is the machine
> hanging on suspend-to-ram. It is, in fact, a kernel panic, but due
> to already suspended devices, that's often not visible to the user.
> 
> Fixes: 22e2f9fa63b0 ("iommu/vt-d: Use per-cpu IOVA caching")
> Signed-off-by: Jan Niehusmann <jan at gondor.com>
> Tested-By: Marius Vlad <marius.c.vlad at intel.com>

Queued to iommu/fixes branch, thanks Jan.



	Joerg