linux/drivers/scsi/mpi3mr
Ranjan Kumar 8e45183978 scsi: mpi3mr: Bad drive in topology results kernel crash
When the SAS Transport Layer support is enabled and a device exposed to
the OS by the driver fails INQUIRY commands, the driver frees up the memory
allocated for an internal HBA port data structure. However, in some places,
the reference to the freed memory is not cleared. When the firmware sends
the Device Info change event for the same device again, the freed memory is
accessed and that leads to memory corruption and OS crash.

Signed-off-by: Ranjan Kumar <ranjan.kumar@broadcom.com>
Signed-off-by: Sreekanth Reddy <sreekanth.reddy@broadcom.com>
Link: https://lore.kernel.org/r/20230228140835.4075-7-ranjan.kumar@broadcom.com
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
2023-03-06 18:33:13 -05:00
..
mpi scsi: mpi3mr: Update mpi3 header files 2022-09-25 13:49:51 -04:00
Kconfig scsi: mpi3mr: Select CONFIG_SCSI_SAS_ATTRS 2022-10-22 03:14:51 +00:00
Makefile scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile 2022-12-14 03:01:38 +00:00
mpi3mr_app.c scsi: mpi3mr: NVMe command size greater than 8K fails 2023-03-06 18:33:13 -05:00
mpi3mr_debug.h scsi: mpi3mr: Add config and transport related debug flags 2022-08-22 23:34:04 -04:00
mpi3mr_fw.c scsi: mpi3mr: Return proper values for failures in firmware init path 2023-03-06 18:33:12 -05:00
mpi3mr_os.c scsi: mpi3mr: ioctl timeout when disabling/enabling interrupt 2023-03-06 18:33:12 -05:00
mpi3mr_transport.c scsi: mpi3mr: Bad drive in topology results kernel crash 2023-03-06 18:33:13 -05:00
mpi3mr.h scsi: mpi3mr: ioctl timeout when disabling/enabling interrupt 2023-03-06 18:33:12 -05:00