dma-mapping: Fix dma_pgprot() for unencrypted coherent pages
authorThomas Hellstrom <thellstrom@vmware.com>
Wed, 4 Mar 2020 11:45:27 +0000 (12:45 +0100)
committerBorislav Petkov <bp@suse.de>
Tue, 17 Mar 2020 10:52:58 +0000 (11:52 +0100)
commit17c4a2ae15a7aaefe84bdb271952678c5c9cd8e1
treeaad4fbfa8cdc5d4111992b12a82c42ed3e61a30d
parent6db73f17c5f155dbcfd5e48e621c706270b84df0
dma-mapping: Fix dma_pgprot() for unencrypted coherent pages

When dma_mmap_coherent() sets up a mapping to unencrypted coherent memory
under SEV encryption and sometimes under SME encryption, it will actually
set up an encrypted mapping rather than an unencrypted, causing devices
that DMAs from that memory to read encrypted contents. Fix this.

When force_dma_unencrypted() returns true, the linear kernel map of the
coherent pages have had the encryption bit explicitly cleared and the
page content is unencrypted. Make sure that any additional PTEs we set
up to these pages also have the encryption bit cleared by having
dma_pgprot() return a protection with the encryption bit cleared in this
case.

Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Acked-by: Tom Lendacky <thomas.lendacky@amd.com>
Link: https://lkml.kernel.org/r/20200304114527.3636-3-thomas_os@shipmail.org
kernel/dma/mapping.c