Commit 008ad26
scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req()
JIRA: https://issues.redhat.com/browse/RHEL-81909
The "sz" argument in mpt3sas_check_cmd_timeout() is the number of u32, not
the number of bytes. We dump that many u32 values to dmesg. Passing the
number of bytes will lead to a read overflow. Divide by 4 to get the
correct value.
Fixes: c72be4b ("scsi: mpt3sas: Add support for MCTP Passthrough commands")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/02b0d4ff-961c-49ae-921a-5cc469edf93c@stanley.mountain
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
(cherry picked from commit 0711f19)
Signed-off-by: Chandrakanth Patil <chanpati@redhat.com>1 parent 1bc3691 commit 008ad26
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
3017 | 3017 | | |
3018 | 3018 | | |
3019 | 3019 | | |
3020 | | - | |
| 3020 | + | |
3021 | 3021 | | |
3022 | 3022 | | |
3023 | 3023 | | |
| |||
0 commit comments