diff options
| author | Tomas Henzl <thenzl@redhat.com> | 2020-06-16 17:04:46 +0200 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2020-06-24 06:23:17 +0200 |
| commit | afe89f115e84edbc76d316759e206580a06c6973 (patch) | |
| tree | 1b49f6c31bce2e2ccb77773a47fc0bd217b41862 /crypto | |
| parent | scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action (diff) | |
| download | linux-afe89f115e84edbc76d316759e206580a06c6973.tar.xz linux-afe89f115e84edbc76d316759e206580a06c6973.zip | |
scsi: mptscsih: Fix read sense data size
The sense data buffer in sense_buf_pool is allocated with size of
MPT_SENSE_BUFFER_ALLOC(64) (multiplied by req_depth) while SNS_LEN(sc)(96)
is used when reading the data. That may lead to a read from unallocated
area, sometimes from another (unallocated) page. To fix this, limit the
read size to MPT_SENSE_BUFFER_ALLOC.
Link: https://lore.kernel.org/r/20200616150446.4840-1-thenzl@redhat.com
Co-developed-by: Stanislav Saner <ssaner@redhat.com>
Signed-off-by: Stanislav Saner <ssaner@redhat.com>
Signed-off-by: Tomas Henzl <thenzl@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions