Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2194910/?format=api
{ "id": 2194910, "url": "http://patchwork.ozlabs.org/api/patches/2194910/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260210065214.2252464-1-abysamross@ibm.com/", "project": { "id": 14, "url": "http://patchwork.ozlabs.org/api/projects/14/?format=api", "name": "QEMU Development", "link_name": "qemu-devel", "list_id": "qemu-devel.nongnu.org", "list_email": "qemu-devel@nongnu.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260210065214.2252464-1-abysamross@ibm.com>", "list_archive_url": null, "date": "2026-02-10T06:52:14", "name": "prevent null pointer dereference during zpci hot unplug", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "06cb5a423f5b92cd8bd61c807569866b9cb8e921", "submitter": { "id": 92616, "url": "http://patchwork.ozlabs.org/api/people/92616/?format=api", "name": "Aby Sam Ross", "email": "abysamross@ibm.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260210065214.2252464-1-abysamross@ibm.com/mbox/", "series": [ { "id": 491621, "url": "http://patchwork.ozlabs.org/api/series/491621/?format=api", "web_url": "http://patchwork.ozlabs.org/project/qemu-devel/list/?series=491621", "date": "2026-02-10T06:52:14", "name": "prevent null pointer dereference during zpci hot unplug", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/491621/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2194910/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2194910/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=ibm.com header.i=@ibm.com header.a=rsa-sha256\n header.s=pp1 header.b=IPM3YP8q;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=nongnu.org\n (client-ip=209.51.188.17; helo=lists.gnu.org;\n envelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.gnu.org (lists.gnu.org [209.51.188.17])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4f9FPP4YT4z1xtV\n\tfor <incoming@patchwork.ozlabs.org>; Tue, 10 Feb 2026 19:40:08 +1100 (AEDT)", "from localhost ([::1] helo=lists1p.gnu.org)\n\tby lists.gnu.org with esmtp (Exim 4.90_1)\n\t(envelope-from <qemu-devel-bounces@nongnu.org>)\n\tid 1vpjHL-0001Wp-S7; Tue, 10 Feb 2026 03:39:27 -0500", "from eggs.gnu.org ([2001:470:142:3::10])\n by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <abysamross@ibm.com>)\n id 1vphcT-0002n9-As; Tue, 10 Feb 2026 01:53:09 -0500", "from mx0b-001b2d01.pphosted.com ([148.163.158.5])\n by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <abysamross@ibm.com>)\n id 1vphcR-0003s6-L1; Tue, 10 Feb 2026 01:53:09 -0500", "from pps.filterd (m0360072.ppops.net [127.0.0.1])\n by mx0a-001b2d01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id\n 619G4jjD369791; Tue, 10 Feb 2026 06:53:04 GMT", "from ppma11.dal12v.mail.ibm.com\n (db.9e.1632.ip4.static.sl-reverse.com [50.22.158.219])\n by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 4c696ws0cj-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);\n Tue, 10 Feb 2026 06:53:04 +0000 (GMT)", "from pps.filterd (ppma11.dal12v.mail.ibm.com [127.0.0.1])\n by ppma11.dal12v.mail.ibm.com (8.18.1.2/8.18.1.2) with ESMTP id\n 61A6FXdp001815;\n Tue, 10 Feb 2026 06:53:03 GMT", "from smtprelay06.fra02v.mail.ibm.com ([9.218.2.230])\n by ppma11.dal12v.mail.ibm.com (PPS) with ESMTPS id 4c6je1yxgc-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT);\n Tue, 10 Feb 2026 06:53:03 +0000", "from smtpav03.fra02v.mail.ibm.com (smtpav03.fra02v.mail.ibm.com\n [10.20.54.102])\n by smtprelay06.fra02v.mail.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id\n 61A6qxAa24773060\n (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK);\n Tue, 10 Feb 2026 06:52:59 GMT", "from smtpav03.fra02v.mail.ibm.com (unknown [127.0.0.1])\n by IMSVA (Postfix) with ESMTP id 6F90420043;\n Tue, 10 Feb 2026 06:52:59 +0000 (GMT)", "from smtpav03.fra02v.mail.ibm.com (unknown [127.0.0.1])\n by IMSVA (Postfix) with ESMTP id B48C320040;\n Tue, 10 Feb 2026 06:52:58 +0000 (GMT)", "from B02-B02RHL5-RH94-0370-9-114-17-225.pok.stglabs.ibm.com (unknown\n [9.114.17.225]) by smtpav03.fra02v.mail.ibm.com (Postfix) with ESMTP;\n Tue, 10 Feb 2026 06:52:58 +0000 (GMT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=cc\n :content-transfer-encoding:date:from:message-id:mime-version\n :subject:to; s=pp1; bh=R/UV6HMEDUMIb9Q8VJA7rKMQ/NPZzRnfxT72mO0kB\n wI=; b=IPM3YP8qHKUHuSZrA14Zva7XpKWd3qXKUZZp8a9Sg54L2hp3wjLq9sior\n Fbm3GIb7tzVwmuqO//SPKPpSASuEd632MYQw8KxH5wV5OkHF5F8AgafPBiUcDNaN\n 1ExR973HABmoSPXScdSVNfvctZF9aOW6KssjjYAwwB/a/LvItMTeZkCVe3xCqpAB\n 1rnmFUcuZShooWinmbEtCsUGJOnlcN1pHxugyJrIfcheH7DD7lq67RRlIYvzaLSO\n VWEb3kNPlc4gdI8NXhXuC4MsCscGVeC+JpgqdkpVJa97A4s/ky6rC3kb0vyX95r4\n T2KLrYUfjZsmI+VwnyLhAqZ8pX8Yg==", "From": "Aby Sam Ross <abysamross@ibm.com>", "To": "qemu-s390x@nongnu.org", "Cc": "qemu-devel@nongnu.org, mjrosato@linux.ibm.com, farman@linux.ibm.com,\n Aby Sam Ross <abysamross@ibm.com>", "Subject": "[PATCH] prevent null pointer dereference during zpci hot unplug", "Date": "Tue, 10 Feb 2026 01:52:14 -0500", "Message-ID": "<20260210065214.2252464-1-abysamross@ibm.com>", "X-Mailer": "git-send-email 2.52.0", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-TM-AS-GCONF": "00", "X-Authority-Analysis": "v=2.4 cv=WZYBqkhX c=1 sm=1 tr=0 ts=698ad5d0 cx=c_pps\n a=aDMHemPKRhS1OARIsFnwRA==:117 a=aDMHemPKRhS1OARIsFnwRA==:17\n a=HzLeVaNsDn8A:10 a=VkNPw1HP01LnGYTKEx00:22 a=Mpw57Om8IfrbqaoTuvik:22\n a=GgsMoib0sEa3-_RKJdDe:22 a=VnNF1IyMAAAA:8 a=_df3JAyxEGjRhYUhYmcA:9", "X-Proofpoint-GUID": "iPFhh6fadNUuXTSWJiEXjvI4qRjRADN6", "X-Proofpoint-ORIG-GUID": "iPFhh6fadNUuXTSWJiEXjvI4qRjRADN6", "X-Proofpoint-Spam-Details-Enc": "AW1haW4tMjYwMjEwMDA1NSBTYWx0ZWRfXwTBUNrMA7p27\n 9rAVEKOIPSUZELe1gtpjoSrlVHLCJ6stBxIBCZt3M/YxXQSY79Kxa36ZSczyvfJr4Ro6u09AnD4\n /WFwhIG562mKlwRacSpQPjLD7Dg8Fkton2qlThkTbG1TLVu6rckhyF/7tVsY/e7NWMMTwv/RmBC\n qpSIG35vVY9T3/LtrCDZhUUEaXNT4eibJ3VKEM7CoOdezwxTr9KGZ/4qE/da4AAQm06oLIgk41x\n Iv1IY0ZsV8UTVcpEAN/GRVfK9R0hmWogeYtPHCHWT/IsKXVcgxwR7yGOWJKXO04vb9EoDC0YyxK\n a9JPQKZETg6kEJRWRoZDTmTeBYzfD29KftMpVTQKGOtisLtq8NOnxo00FLRlPfLogudXAS47tpx\n WoZIxwI3K+moYvsc7xmPTxT1zglyn1AXvYiZpMZAdykYU8tnHetSSNCzFJpVhzwY5iKNhnMkq4Y\n SLYGBwHnd83riCKU3cg==", "X-Proofpoint-Virus-Version": "vendor=baseguard\n engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.51,FMLib:17.12.100.49\n definitions=2026-02-09_01,2026-02-09_04,2025-10-01_01", "X-Proofpoint-Spam-Details": "rule=outbound_notspam policy=outbound score=0\n spamscore=0 clxscore=1011 phishscore=0 bulkscore=0 adultscore=0\n priorityscore=1501 lowpriorityscore=0 suspectscore=0 impostorscore=0\n malwarescore=0 classifier=typeunknown authscore=0 authtc= authcc=\n route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2601150000\n definitions=main-2602100055", "Received-SPF": "pass client-ip=148.163.158.5; envelope-from=abysamross@ibm.com;\n helo=mx0b-001b2d01.pphosted.com", "X-Spam_score_int": "-20", "X-Spam_score": "-2.1", "X-Spam_bar": "--", "X-Spam_report": "(-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,\n DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,\n RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001,\n RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,\n SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no", "X-Spam_action": "no action", "X-Mailman-Approved-At": "Tue, 10 Feb 2026 03:39:27 -0500", "X-BeenThere": "qemu-devel@nongnu.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "qemu development <qemu-devel.nongnu.org>", "List-Unsubscribe": "<https://lists.nongnu.org/mailman/options/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>", "List-Archive": "<https://lists.nongnu.org/archive/html/qemu-devel>", "List-Post": "<mailto:qemu-devel@nongnu.org>", "List-Help": "<mailto:qemu-devel-request@nongnu.org?subject=help>", "List-Subscribe": "<https://lists.nongnu.org/mailman/listinfo/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=subscribe>", "Errors-To": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org", "Sender": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org" }, "content": "vfio-pci hostdev realize during zpci hot plug fails (in `vfio_pci_realize()`)\nif the vfio group file in `/dev/vfio/` lacks appropriate permissions and the\nhostdev[/properties] addition doesn't reach the point where it could be\nassociated with previously added zpci device (in `s390_pcihost_plug()`).\nAs a result, zpci iommu pointer remains null. The zpci hot unplug following the\nfailed hostdev addition assumes zpci iommu pointer was assigned and tries to\nmake use of it to end the dma count resulting in a null pointer dereference.\nIn the non-hotplug scenario, `qdev_unplug()` for the zpci device is not called\nafter hostdev addition failure and this issue is not encountered.\n\nFixes: 37fa32de7073\nSigned-off-by: Aby Sam Ross <abysamross@ibm.com>\n---\n hw/s390x/s390-pci-bus.c | 2 +-\n 1 file changed, 1 insertion(+), 1 deletion(-)", "diff": "diff --git a/hw/s390x/s390-pci-bus.c b/hw/s390x/s390-pci-bus.c\nindex b438d63c44..3166b91c46 100644\n--- a/hw/s390x/s390-pci-bus.c\n+++ b/hw/s390x/s390-pci-bus.c\n@@ -1248,7 +1248,7 @@ static void s390_pcihost_unplug(HotplugHandler *hotplug_dev, DeviceState *dev,\n pbdev->fid = 0;\n QTAILQ_REMOVE(&s->zpci_devs, pbdev, link);\n g_hash_table_remove(s->zpci_table, &pbdev->idx);\n- if (pbdev->iommu->dma_limit) {\n+ if (pbdev->iommu && pbdev->iommu->dma_limit) {\n s390_pci_end_dma_count(s, pbdev->iommu->dma_limit);\n }\n qdev_unrealize(dev);\n", "prefixes": [] }