Bug 198661

Summary: KASAN: add checks to DMA transfers
Product: Memory Management Reporter: Dmitry Vyukov (dvyukov)
Component: SanitizersAssignee: Dmitry Vyukov (dvyukov)
Status: NEW ---    
Severity: enhancement CC: kasan-dev
Priority: P1    
Hardware: All   
OS: Linux   
Kernel Version: ALL Subsystem:
Regression: No Bisected commit-id:

Description Dmitry Vyukov 2018-02-04 11:07:43 UTC
We have a case where [presumably] DMA transfers in ATA corrupt memory:
https://groups.google.com/forum/#!topic/syzkaller/9RNr9Gu0MyY
That's left unnoticed and then causes dozens of assorted crashes everywhere.
We should add KASAN checks to the places where DMA commands are issued and check that they are issued for valid memory ranges.
Need to check if we need similar checks for i2c/spi/virtio/etc.