[v2] app/dma-perf: fix lcores array out of bounds access
Checks
Commit Message
The default size of the lcores array in the lcore dma map
is MAX_WORKER_NB. However, when parsing configuration
parameters, MAX_LCORE_NB is used as a constraint.
Since MAX_LCORE_NB is greater than MAX_WORKER_NB, this
causes array access to go out of bounds when the value
of the `lcore_dma/lcore` configuration item in the
parameter file is greater than MAX_WORKER_NB.
This patch fixes the issue by removing the MAX_LCORE_NB
macro and using MAX_WORKER_NB consistently.
Fixes: 623dc9364dc6 ("app/dma-perf: introduce DMA performance test")
Signed-off-by: Mingjin Ye <mingjinx.ye@intel.com>
---
v2:A better solution.
---
app/test-dma-perf/main.c | 4 ++--
app/test-dma-perf/main.h | 1 -
2 files changed, 2 insertions(+), 3 deletions(-)
Comments
Looks good to me.
Acked-by: Gowrishankar Muthukrishnan <gmuthukrishn@marvell.com>
26/10/2023 11:53, Mingjin Ye:
> The default size of the lcores array in the lcore dma map
> is MAX_WORKER_NB. However, when parsing configuration
> parameters, MAX_LCORE_NB is used as a constraint.
> Since MAX_LCORE_NB is greater than MAX_WORKER_NB, this
> causes array access to go out of bounds when the value
> of the `lcore_dma/lcore` configuration item in the
> parameter file is greater than MAX_WORKER_NB.
>
> This patch fixes the issue by removing the MAX_LCORE_NB
> macro and using MAX_WORKER_NB consistently.
>
> Fixes: 623dc9364dc6 ("app/dma-perf: introduce DMA performance test")
>
> Signed-off-by: Mingjin Ye <mingjinx.ye@intel.com>
Applied, thanks.
@@ -177,7 +177,7 @@ parse_lcore(struct test_configure *test_case, const char *value)
char *token = strtok(input, ", ");
while (token != NULL) {
- if (lcore_dma_map->cnt >= MAX_LCORE_NB) {
+ if (lcore_dma_map->cnt >= MAX_WORKER_NB) {
free(input);
return -1;
}
@@ -248,7 +248,7 @@ parse_lcore_dma(struct test_configure *test_case, const char *value)
}
lcore_dma_map = &test_case->lcore_dma_map;
- if (lcore_dma_map->cnt >= MAX_LCORE_NB) {
+ if (lcore_dma_map->cnt >= MAX_WORKER_NB) {
fprintf(stderr, "lcores count error\n");
ret = -1;
break;
@@ -14,7 +14,6 @@
#define MAX_OUTPUT_STR_LEN 512
#define MAX_DMA_NB 128
-#define MAX_LCORE_NB 256
extern char output_str[MAX_WORKER_NB + 1][MAX_OUTPUT_STR_LEN];