Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Ben Hutchings 564e1986b0 scsi: aacraid: Fix double-free on probe failure ... [ Upstream commit 919ddf8336f0b84c0453bac583808c9f165a85c2 ] aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member. After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting.in a double-free. Reported-by: Michael Gordon <m.gordon.zelenoborsky@gmail.com> Link: https://bugs.debian.org/1075855 Fixes: 8e0c5ebde8 ("[SCSI] aacraid: Newer adapter communication iterface support") Signed-off-by: Ben Hutchings <benh@debian.org> Link: https://lore.kernel.org/r/ZsZvfqlQMveoL5KQ@decadent.org.uk Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-09-04 13:15:05 +02:00
..
aacraid	scsi: aacraid: Fix double-free on probe failure	2024-09-04 13:15:05 +02:00
aic7xxx	scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8	2021-07-25 14:35:12 +02:00
aic94xx	scsi: aic94xx: Add missing check for dma_map_single()	2023-03-11 16:43:47 +01:00
arcmsr
arm
be2iscsi	scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()	2023-12-13 18:18:13 +01:00
bfa	scsi: bfa: Ensure the copied buf is NUL terminated	2024-06-16 13:28:36 +02:00
bnx2fc	scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload	2024-05-17 11:43:50 +02:00
bnx2i	scsi: iscsi: Fix shost->max_id use	2021-07-20 16:10:43 +02:00
csiostor	scsi: csiostor: Avoid function pointer casts	2024-03-26 18:22:23 -04:00
cxgbi	scsi: iscsi: Fix shost->max_id use	2021-07-20 16:10:43 +02:00
cxlflash
device_handler	scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()	2023-04-05 11:16:36 +02:00
dpt
esas2r
fcoe	scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"	2024-02-23 08:25:10 +01:00
fnic	scsi: fnic: Return error if vmalloc() failed	2024-01-25 14:34:25 -08:00
hisi_sas	scsi: hisi_sas: Replace with standard error code return value	2024-01-25 14:34:25 -08:00
ibmvscsi
ibmvscsi_tgt	scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024	2022-04-20 09:19:36 +02:00
isci	scsi: isci: Fix an error code problem in isci_io_request_build()	2024-02-23 08:25:04 +01:00
libfc	scsi: libfc: Fix up timeout error in fc_fcp_rec_error()	2024-02-23 08:24:58 +01:00
libsas	scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed	2024-07-27 10:38:31 +02:00
lpfc	scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()	2024-09-04 13:14:55 +02:00
megaraid	scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers	2023-11-28 16:50:18 +00:00
mpt3sas	scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES	2024-08-19 05:33:52 +02:00
mvsas	scsi: mvsas: Add PCI ID of RocketRaid 2640	2022-04-20 09:19:37 +02:00
pcmcia	scsi: fdomain: Fix error return code in fdomain_probe()	2021-09-22 12:26:24 +02:00
pm8001	treewide: Remove uninitialized_var() usage	2023-06-09 10:29:01 +02:00
qedf	scsi: qedf: Set qed_slowpath_params to zero before use	2024-07-27 10:38:28 +02:00
qedi	scsi: qedi: Fix crash while reading debugfs attribute	2024-07-05 09:08:21 +02:00
qla2xxx	scsi: qla2xxx: validate nvme_local_port correctly	2024-08-19 05:33:38 +02:00
qla4xxx	scsi: qla4xxx: Add length check when parsing nlattrs	2023-09-23 10:59:49 +02:00
smartpqi	scsi: smartpqi: Fix DMA direction for RAID requests	2022-08-25 11:17:56 +02:00
snic	scsi: snic: Fix double free in snic_tgt_create()	2023-08-30 16:27:27 +02:00
sym53c8xx_2
ufs	scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic	2024-08-19 05:33:51 +02:00
.gitignore
3w-9xxx.c	scsi: 3w-9xxx: Avoid disabling device if failing to enable it	2022-10-26 13:22:56 +02:00
3w-9xxx.h
3w-sas.c
3w-sas.h
3w-xxxx.c	scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()	2023-07-27 08:37:16 +02:00
3w-xxxx.h
53c700.c	scsi: 53c700: Check that command slot is not NULL	2023-08-16 18:19:25 +02:00
53c700.h
53c700.scr
53c700_d.h_shipped
a100u2w.c
a100u2w.h
a2091.c
a2091.h
a3000.c
a3000.h
a4000t.c
advansys.c	scsi: advansys: Fix kernel pointer leak	2021-11-26 10:47:15 +01:00
aha152x.c	scsi: aha152x: Fix aha152x_setup() __setup handler return value	2022-04-15 14:18:34 +02:00
aha152x.h
aha1542.c
aha1542.h
aha1740.c
aha1740.h
am53c974.c
atari_scsi.c
atp870u.c
atp870u.h
BusLogic.c	scsi: BusLogic: Fix missing pr_cont() use	2021-09-22 12:26:37 +02:00
BusLogic.h
bvme6000_scsi.c
ch.c
constants.c
dc395x.c	treewide: Remove uninitialized_var() usage	2023-06-09 10:29:01 +02:00
dc395x.h
dmx3191d.c
dpt_i2o.c	scsi: dpt_i2o: Do not process completions with invalid addresses	2023-06-09 10:29:04 +02:00
dpti.h	scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)	2023-06-09 10:29:03 +02:00
esp_scsi.c
esp_scsi.h
fdomain.c
fdomain.h
fdomain_isa.c
fdomain_pci.c
FlashPoint.c	scsi: FlashPoint: Rename si_flags field	2021-07-14 16:53:41 +02:00
g_NCR5380.c
gdth.c
gdth.h
gdth_ioctl.h
gdth_proc.c
gdth_proc.h
gvp11.c
gvp11.h
hosts.c	scsi: core: Fix unremoved procfs host directory regression	2024-04-13 12:51:32 +02:00
hpsa.c	scsi: hpsa: Fix allocation size for Scsi_Host private data	2024-06-16 13:28:35 +02:00
hpsa.h
hpsa_cmd.h
hptiop.c
hptiop.h
imm.c
imm.h
initio.c
initio.h
ipr.c	scsi: ipr: Work around fortify-string warning	2023-03-11 16:44:13 +01:00
ipr.h
ips.c
ips.h
iscsi_boot_sysfs.c
iscsi_tcp.c	scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress	2023-02-22 12:50:25 +01:00
iscsi_tcp.h
jazz_esp.c
Kconfig	scsi: jazz_esp: Only build if SCSI core is builtin	2024-03-01 13:13:37 +01:00
lasi700.c
libiscsi.c	scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()	2022-01-11 15:23:33 +01:00
libiscsi_tcp.c
mac53c94.c
mac53c94.h
mac_esp.c
mac_scsi.c
Makefile
megaraid.c	scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS	2023-05-17 11:35:41 +02:00
megaraid.h
mesh.c
mesh.h
mvme16x_scsi.c
mvme147.c
mvme147.h
mvumi.c
mvumi.h
myrb.c	scsi: mylex: Fix sysfs buffer lengths	2024-04-13 12:51:36 +02:00
myrb.h
myrs.c	scsi: mylex: Fix sysfs buffer lengths	2024-04-13 12:51:36 +02:00
myrs.h
ncr53c8xx.c
ncr53c8xx.h
NCR5380.c
NCR5380.h
nsp32.c
nsp32.h
nsp32_debug.c
nsp32_io.h
pmcraid.c	scsi: pmcraid: Fix missing resource cleanup in error case	2022-06-22 14:11:20 +02:00
pmcraid.h
ppa.c
ppa.h
ps3rom.c
qla1280.c
qla1280.h
qlogicfas.c
qlogicfas408.c
qlogicfas408.h
qlogicpti.c
qlogicpti.h
raid_class.c	scsi: core: raid_class: Remove raid_component_add()	2023-08-30 16:27:27 +02:00
script_asm.pl
scsi.c	scsi: core: Improve scsi_vpd_inquiry() checks	2023-04-26 11:24:03 +02:00
scsi.h
scsi_common.c
scsi_debug.c	scsi: scsi_debug: Fix a warning in resp_write_scat()	2023-01-18 11:41:18 +01:00
scsi_debugfs.c	scsi: core: Show SCMD_LAST in text form	2022-01-27 09:19:52 +01:00
scsi_debugfs.h
scsi_devinfo.c	scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR	2023-04-05 11:16:40 +02:00
scsi_dh.c
scsi_error.c
scsi_ioctl.c
scsi_lib.c	scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed	2023-06-09 10:28:58 +02:00
scsi_lib_dma.c
scsi_logging.c
scsi_logging.h
scsi_netlink.c
scsi_pm.c
scsi_priv.h
scsi_proc.c	scsi: core: Fix legacy /proc parsing buffer overflow	2023-08-16 18:19:24 +02:00
scsi_sas_internal.h
scsi_scan.c	scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"	2023-02-22 12:50:23 +01:00
scsi_sysctl.c
scsi_sysfs.c	scsi: core: Restrict legal sdev_state transitions via sysfs	2022-11-10 17:57:53 +01:00
scsi_trace.c
scsi_transport_api.h
scsi_transport_fc.c
scsi_transport_iscsi.c	scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()	2023-09-23 10:59:49 +02:00
scsi_transport_sas.c
scsi_transport_spi.c	scsi: spi: Fix sshdr use	2024-09-04 13:14:53 +02:00
scsi_transport_srp.c
scsicam.c
sd.c	scsi: sd: Free scsi_disk device via put_device()	2021-10-09 14:39:49 +02:00
sd.h
sd_dif.c
sd_zbc.c
sense_codes.h
ses.c	scsi: ses: Handle enclosure with just a primary component gracefully	2023-04-20 12:07:32 +02:00
sg.c	scsi: sg: Allow waiting for commands to complete on removed device	2022-08-25 11:18:17 +02:00
sgiwd93.c
sim710.c
sni_53c710.c
sr.c	scsi: sr: Don't use GFP_DMA	2022-01-27 09:19:48 +01:00
sr.h
sr_ioctl.c
sr_vendor.c	scsi: sr: Don't use GFP_DMA	2022-01-27 09:19:48 +01:00
st.c
st.h
st_options.h
stex.c	scsi: stex: Fix gcc 13 warnings	2023-06-09 10:29:00 +02:00
storvsc_drv.c	scsi: storvsc: Always set no_report_opcodes	2023-09-23 10:59:39 +02:00
sun3_scsi.c
sun3_scsi_vme.c
sun3x_esp.c
sun_esp.c
virtio_scsi.c	scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"	2021-10-17 10:42:34 +02:00
vmw_pvscsi.c	scsi: vmw_pvscsi: Set residual data length conditionally	2022-01-05 12:37:46 +01:00
vmw_pvscsi.h	scsi: vmw_pvscsi: Expand vcpuHint to 16 bits	2022-06-22 14:11:20 +02:00
wd33c93.c
wd33c93.h
wd719x.c
wd719x.h
xen-scsifront.c	xen/scsifront: don't use gnttab_query_foreign_access() for mapped status	2022-03-11 11:22:39 +01:00
zalon.c
zorro7xx.c	scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()	2022-04-15 14:18:37 +02:00
zorro_esp.c