mirror of
https://github.com/torvalds/linux.git
synced 2026-10-07 05:31:08 -04:00
Tomas Henzl
afe89f115e
The sense data buffer in sense_buf_pool is allocated with size of MPT_SENSE_BUFFER_ALLOC(64) (multiplied by req_depth) while SNS_LEN(sc)(96) is used when reading the data. That may lead to a read from unallocated area, sometimes from another (unallocated) page. To fix this, limit the read size to MPT_SENSE_BUFFER_ALLOC. Link: https://lore.kernel.org/r/[email protected] Co-developed-by: Stanislav Saner <[email protected]> Signed-off-by: Stanislav Saner <[email protected]> Signed-off-by: Tomas Henzl <[email protected]> Signed-off-by: Martin K. Petersen <[email protected]>