From patchwork Mon Nov 27 20:58:03 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Alan Tull X-Patchwork-Id: 841875 Return-Path: X-Original-To: incoming-dt@patchwork.ozlabs.org Delivered-To: patchwork-incoming-dt@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=vger.kernel.org (client-ip=209.132.180.67; helo=vger.kernel.org; envelope-from=devicetree-owner@vger.kernel.org; receiver=) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by ozlabs.org (Postfix) with ESMTP id 3ylzk93lZyz9s3w for ; Tue, 28 Nov 2017 08:01:37 +1100 (AEDT) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753617AbdK0U6M (ORCPT ); Mon, 27 Nov 2017 15:58:12 -0500 Received: from mail.kernel.org ([198.145.29.99]:40230 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753592AbdK0U6L (ORCPT ); Mon, 27 Nov 2017 15:58:11 -0500 Received: from localhost.localdomain (user-0ccsrjt.cable.mindspring.com [24.206.110.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id ABA0E21999; Mon, 27 Nov 2017 20:58:09 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org ABA0E21999 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=kernel.org Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=atull@kernel.org From: Alan Tull To: Rob Herring , Frank Rowand , Pantelis Antoniou Cc: Moritz Fischer , Alan Tull , devicetree@vger.kernel.org, linux-kernel@vger.kernel.org, linux-fpga@vger.kernel.org Subject: [RFC 1/2] of: overlay: add whitelist Date: Mon, 27 Nov 2017 14:58:03 -0600 Message-Id: <1511816284-12145-2-git-send-email-atull@kernel.org> X-Mailer: git-send-email 2.7.4 In-Reply-To: <1511816284-12145-1-git-send-email-atull@kernel.org> References: <1511816284-12145-1-git-send-email-atull@kernel.org> Sender: devicetree-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: devicetree@vger.kernel.org Add simple whitelist. When an overlay is submitted, if any target in the overlay is not in the whitelist, the overlay is rejected. Drivers that support dynamic configuration can register their device node with: int of_add_whitelist_node(struct device_node *np) and remove themselves with: void of_remove_whitelist_node(struct device_node *np) Signed-off-by: Alan Tull --- drivers/of/overlay.c | 73 ++++++++++++++++++++++++++++++++++++++++++++++++++++ include/linux/of.h | 12 +++++++++ 2 files changed, 85 insertions(+) diff --git a/drivers/of/overlay.c b/drivers/of/overlay.c index c150abb..5f952a1 100644 --- a/drivers/of/overlay.c +++ b/drivers/of/overlay.c @@ -21,6 +21,7 @@ #include #include #include +#include #include "of_private.h" @@ -646,6 +647,74 @@ static void free_overlay_changeset(struct overlay_changeset *ovcs) kfree(ovcs); } +/* lock for adding/removing device nodes to the whitelist */ +static spinlock_t whitelist_lock; + +static struct list_head whitelist_list = LIST_HEAD_INIT(whitelist_list); + +struct dt_overlay_whitelist { + struct device_node *np; + struct list_head node; +}; + +int of_add_whitelist_node(struct device_node *np) +{ + unsigned long flags; + struct dt_overlay_whitelist *wln; + + wln = kzalloc(sizeof(*wln), GFP_KERNEL); + if (!wln) + return -ENOMEM; + + wln->np = np; + + spin_lock_irqsave(&whitelist_lock, flags); + list_add(&wln->node, &whitelist_list); + spin_unlock_irqrestore(&whitelist_lock, flags); + + return 0; +} +EXPORT_SYMBOL_GPL(of_add_whitelist_node); + +void of_remove_whitelist_node(struct device_node *np) +{ + struct dt_overlay_whitelist *wln; + unsigned long flags; + + list_for_each_entry(wln, &whitelist_list, node) { + if (np == wln->np) { + spin_lock_irqsave(&whitelist_lock, flags); + list_del(&wln->node); + spin_unlock_irqrestore(&whitelist_lock, flags); + kfree(wln); + return; + } + } +} +EXPORT_SYMBOL_GPL(of_remove_whitelist_node); + +static int of_check_whitelist(struct overlay_changeset *ovcs) +{ + struct dt_overlay_whitelist *wln; + struct device_node *target; + int i; + + for (i = 0; i < ovcs->count; i++) { + target = ovcs->fragments[i].target; + if (!of_node_cmp(target->name, "__symbols__")) + continue; + + list_for_each_entry(wln, &whitelist_list, node) + if (target == wln->np) + break; + + if (target != wln->np) + return -ENODEV; + } + + return 0; +} + /** * of_overlay_apply() - Create and apply an overlay changeset * @tree: Expanded overlay device tree @@ -717,6 +786,10 @@ int of_overlay_apply(struct device_node *tree, int *ovcs_id) if (ret) goto err_free_overlay_changeset; + ret = of_check_whitelist(ovcs); + if (ret) + goto err_free_overlay_changeset; + ret = overlay_notify(ovcs, OF_OVERLAY_PRE_APPLY); if (ret) { pr_err("overlay changeset pre-apply notify error %d\n", ret); diff --git a/include/linux/of.h b/include/linux/of.h index d3dea1d..5bf652a1 100644 --- a/include/linux/of.h +++ b/include/linux/of.h @@ -1364,6 +1364,9 @@ int of_overlay_remove_all(void); int of_overlay_notifier_register(struct notifier_block *nb); int of_overlay_notifier_unregister(struct notifier_block *nb); +int of_add_whitelist_node(struct device_node *np); +void of_remove_whitelist_node(struct device_node *np); + #else static inline int of_overlay_apply(struct device_node *tree, int *ovcs_id) @@ -1391,6 +1394,15 @@ static inline int of_overlay_notifier_unregister(struct notifier_block *nb) return 0; } +static inline int of_add_whitelist_node(struct device_node *np) +{ + return 0; +} + +static inline void of_remove_whitelist_node(struct device_node *np) +{ +} + #endif #endif /* _LINUX_OF_H */