Bui Quang Minh
a75001678e
scsi: qedf: Ensure the copied buf is NUL terminated ...
[ Upstream commit d0184a375ee797eb657d74861ba0935b6e405c62 ]
Currently, we allocate a count-sized kernel buffer and copy count from
userspace to that buffer. Later, we use kstrtouint on this buffer but we
don't ensure that the string is terminated inside the buffer, this can
lead to OOB read when using kstrtouint. Fix this issue by using
memdup_user_nul instead of memdup_user.
Fixes: 61d8658b4ahttps://lore.kernel.org/r/20240424-fix-oob-read-v2-4-f1f1b53a10f4@gmail.com
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-06-16 13:28:36 +02:00
scsi: aacraid: Fix error handling paths in aac_probe_one()
2020-10-01 13:17:56 +02:00
scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
2021-07-25 14:35:12 +02:00
scsi: aic94xx: Add missing check for dma_map_single()
2023-03-11 16:43:47 +01:00
scsi: eesox: Fix different dev_id between request_irq() and free_irq()
2020-08-19 08:16:09 +02:00
scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
2023-12-13 18:18:13 +01:00
scsi: bfa: Ensure the copied buf is NUL terminated
2024-06-16 13:28:36 +02:00
scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
2024-05-17 11:43:50 +02:00
scsi: iscsi: Fix shost->max_id use
2021-07-20 16:10:43 +02:00
scsi: csiostor: Avoid function pointer casts
2024-03-26 18:22:23 -04:00
scsi: iscsi: Fix shost->max_id use
2021-07-20 16:10:43 +02:00
scsi: cxlflash: Fix error return code in cxlflash_probe()
2020-10-01 13:18:02 +02:00
scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
2023-04-05 11:16:36 +02:00
scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
2024-02-23 08:25:10 +01:00
scsi: fnic: Return error if vmalloc() failed
2024-01-25 14:34:25 -08:00
scsi: hisi_sas: Replace with standard error code return value
2024-01-25 14:34:25 -08:00
scsi: ibmvfc: Fix invalid state machine BUG_ON()
2021-05-14 09:44:25 +02:00
scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
2022-04-20 09:19:36 +02:00
scsi: isci: Fix an error code problem in isci_io_request_build()
2024-02-23 08:25:04 +01:00
scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
2024-02-23 08:24:58 +01:00
scsi: libsas: Fix the failure of adding phy with zero-address to port
2024-06-16 13:28:35 +02:00
scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
2024-05-17 11:43:50 +02:00
scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers
2023-11-28 16:50:18 +00:00
scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
2024-03-26 18:22:13 -04:00
scsi: mvsas: Add PCI ID of RocketRaid 2640
2022-04-20 09:19:37 +02:00
scsi: fdomain: Fix error return code in fdomain_probe()
2021-09-22 12:26:24 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
scsi: qedf: Ensure the copied buf is NUL terminated
2024-06-16 13:28:36 +02:00
scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
2023-09-23 10:59:39 +02:00
scsi: qla2xxx: Fix command flush on cable pull
2024-04-13 12:51:32 +02:00
scsi: qla4xxx: Add length check when parsing nlattrs
2023-09-23 10:59:49 +02:00
scsi: smartpqi: Fix DMA direction for RAID requests
2022-08-25 11:17:56 +02:00
scsi: snic: Fix double free in snic_tgt_create()
2023-08-30 16:27:27 +02:00
scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
2024-06-16 13:28:34 +02:00
scsi: 3w-9xxx: Avoid disabling device if failing to enable it
2022-10-26 13:22:56 +02:00
scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
2023-07-27 08:37:16 +02:00
scsi: 53c700: Check that command slot is not NULL
2023-08-16 18:19:25 +02:00
scsi: advansys: Fix kernel pointer leak
2021-11-26 10:47:15 +01:00
scsi: aha152x: Fix aha152x_setup() __setup handler return value
2022-04-15 14:18:34 +02:00
scsi: BusLogic: Fix missing pr_cont() use
2021-09-22 12:26:37 +02:00
scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic
2021-06-03 08:59:11 +02:00
treewide: Remove uninitialized_var() usage
2023-06-09 10:29:01 +02:00
scsi: dpt_i2o: Do not process completions with invalid addresses
2023-06-09 10:29:04 +02:00
scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)
2023-06-09 10:29:03 +02:00
scsi: FlashPoint: Rename si_flags field
2021-07-14 16:53:41 +02:00
scsi: core: Fix unremoved procfs host directory regression
2024-04-13 12:51:32 +02:00
scsi: hpsa: Fix allocation size for Scsi_Host private data
2024-06-16 13:28:35 +02:00
scsi: ipr: Work around fortify-string warning
2023-03-11 16:44:13 +01:00
scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj
2020-06-24 17:50:37 +02:00
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
2023-02-22 12:50:25 +01:00
scsi: jazz_esp: Add IRQ check
2021-05-14 09:44:25 +02:00
scsi: jazz_esp: Only build if SCSI core is builtin
2024-03-01 13:13:37 +01:00
scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
2022-01-11 15:23:33 +01:00
scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
2023-05-17 11:35:41 +02:00
scsi: mesh: Fix panic after host or bus reset
2020-08-19 08:16:15 +02:00
scsi: mvumi: Fix error return in mvumi_io_attach()
2020-10-29 09:58:04 +01:00
scsi: mylex: Fix sysfs buffer lengths
2024-04-13 12:51:36 +02:00
scsi: mylex: Fix sysfs buffer lengths
2024-04-13 12:51:36 +02:00
scsi: pmcraid: Fix missing resource cleanup in error case
2022-06-22 14:11:20 +02:00
scsi: core: raid_class: Remove raid_component_add()
2023-08-30 16:27:27 +02:00
scsi: core: Improve scsi_vpd_inquiry() checks
2023-04-26 11:24:03 +02:00
scsi: scsi_debug: Fix a warning in resp_write_scat()
2023-01-18 11:41:18 +01:00
scsi: core: Show SCMD_LAST in text form
2022-01-27 09:19:52 +01:00
scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
2023-04-05 11:16:40 +02:00
scsi: dh: Add Fujitsu device to devinfo and dh lists
2020-07-29 10:18:27 +02:00
scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
2023-06-09 10:28:58 +02:00
scsi: pm: Balance pm_only counter of request queue during system resume
2020-06-07 13:18:50 +02:00
scsi: core: Fix legacy /proc parsing buffer overflow
2023-08-16 18:19:24 +02:00
scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT"
2023-02-22 12:50:23 +01:00
scsi: core: Restrict legal sdev_state transitions via sysfs
2022-11-10 17:57:53 +01:00
scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
2023-09-23 10:59:49 +02:00
scsi: scsi_transport_spi: Set RQF_PM for domain validation commands
2021-01-12 20:16:09 +01:00
scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
2021-04-21 12:56:14 +02:00
scsi: sd: Free scsi_disk device via put_device()
2021-10-09 14:39:49 +02:00
scsi: ses: Handle enclosure with just a primary component gracefully
2023-04-20 12:07:32 +02:00
scsi: sg: Allow waiting for commands to complete on removed device
2022-08-25 11:18:17 +02:00
scsi: sni_53c710: Add IRQ check
2021-05-14 09:44:25 +02:00
scsi: sr: Don't use GFP_DMA
2022-01-27 09:19:48 +01:00
scsi: sr: Don't use GFP_DMA
2022-01-27 09:19:48 +01:00
scsi: st: Fix a use after free in st_open()
2021-04-07 14:47:39 +02:00
scsi: stex: Fix gcc 13 warnings
2023-06-09 10:29:00 +02:00
scsi: storvsc: Always set no_report_opcodes
2023-09-23 10:59:39 +02:00
scsi: sun3x_esp: Add IRQ check
2021-05-14 09:44:25 +02:00
scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
2021-10-17 10:42:34 +02:00
scsi: vmw_pvscsi: Set residual data length conditionally
2022-01-05 12:37:46 +01:00
scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
2022-06-22 14:11:20 +02:00
xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
2022-03-11 11:22:39 +01:00
scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
2022-04-15 14:18:37 +02:00
a75001678e