Dan Carpenter b197f67ccf scsi: bfa: integer overflow in debugfs ...

[ Upstream commit 3e35127565 ]

We could allocate less memory than intended because we do:

	bfad->regdata = kzalloc(len << 2, GFP_KERNEL);

The shift can overflow leading to a crash.  This is debugfs code so the
impact is very small.  I fixed the network version of this in March with
commit 13e2d5187f ("bna: integer overflow bug in debugfs").

Fixes: ab2a9ba189 ("[SCSI] bfa: add debugfs support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-12-20 10:10:36 +01:00

..

aacraid

scsi: aacraid: use timespec64 instead of timeval

2017-12-20 10:10:23 +01:00

aic7xxx

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

aic94xx

scsi: libsas: move bus_reset_handler() to target_reset_handler()

2017-08-25 17:21:10 -04:00

arcmsr

arcmsr: add const to bin_attribute structures

2017-08-10 19:40:50 -04:00

arm

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

be2iscsi

scsi: be2iscsi: Replace PCI pool old API

2017-08-07 14:04:01 -04:00

bfa

scsi: bfa: integer overflow in debugfs

2017-12-20 10:10:36 +01:00

bnx2fc

Merge branch 'fixes' into misc

2017-09-07 12:12:43 -07:00

bnx2i

scsi: bnx2i: Simplify cpu hotplug code

2017-07-26 21:51:25 -04:00

csiostor

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

cxgbi

Merge branch 'fixes' into misc

2017-09-07 12:12:43 -07:00

cxlflash

scsi: cxlflash: Fix vlun resize failure in the shrink path

2017-08-25 18:24:04 -04:00

device_handler

…

dpt

…

esas2r

scsi: esas2r: constify pci_device_id.

2017-08-24 22:28:52 -04:00

fcoe

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

fnic

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

hisi_sas

scsi: hisi_sas: fix the risk of freeing slot twice

2017-12-20 10:10:32 +01:00

ibmvscsi

scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id

2017-08-25 17:42:42 -04:00

ibmvscsi_tgt

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

isci

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

libfc

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

libsas

scsi: libsas: fix length error in sas_smp_handler()

2017-12-20 10:10:20 +01:00

lpfc

scsi: lpfc: Fix oops if nvmet_fc_register_targetport fails

2017-11-30 08:40:50 +00:00

megaraid

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mpt3sas

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mvsas

scsi: libsas: move bus_reset_handler() to target_reset_handler()

2017-08-25 17:21:10 -04:00

osd

…

pcmcia

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

pm8001

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

qedf

Merge branch 'fixes' into misc

2017-09-07 12:12:43 -07:00

qedi

Merge branch 'fixes' into misc

2017-09-07 12:12:43 -07:00

qla2xxx

scsi: qla2xxx: Suppress a kernel complaint in qla_init_base_qpair()

2017-11-30 08:40:50 +00:00

qla4xxx

…

smartpqi

scsi: smartpqi: remove the smp_handler stub

2017-08-29 21:51:44 -04:00

snic

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sym53c8xx_2

drivers/scsi/sym53c8xx_2/sym_hipd.c: convert to use memset32

2017-09-08 18:26:48 -07:00

ufs

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

.gitignore

…

3w-9xxx.c

…

3w-9xxx.h

…

3w-sas.c

…

3w-sas.h

…

3w-xxxx.c

…

3w-xxxx.h

…

53c700_d.h_shipped

…

53c700.c

scsi: 53c700: move bus reset to host reset

2017-08-25 17:21:11 -04:00

53c700.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

53c700.scr

…

a100u2w.c

…

a100u2w.h

…

a2091.c

scsi: drop bus reset for wd33c93-compatible boards

2017-08-25 17:21:10 -04:00

a2091.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

a3000.c

scsi: drop bus reset for wd33c93-compatible boards

2017-08-25 17:21:10 -04:00

a3000.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

a4000t.c

…

advansys.c

…

aha152x.c

scsi: aha152x: drop host reset

2017-08-25 17:21:11 -04:00

aha152x.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

aha1542.c

scsi: aha1542: constify pnp_device_id

2017-08-24 22:29:07 -04:00

aha1542.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

aha1740.c

…

aha1740.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

am53c974.c

…

atari_scsi.c

scsi: NCR5380: Move bus reset to host reset

2017-08-25 17:21:11 -04:00

atp870u.c

…

atp870u.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

BusLogic.c

…

BusLogic.h

…

bvme6000_scsi.c

…

ch.c

scsi: ch: add refcounting

2017-08-24 22:29:06 -04:00

constants.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

dc395x.c

…

dc395x.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

dmx3191d.c

scsi: NCR5380: Move bus reset to host reset

2017-08-25 17:21:11 -04:00

dpt_i2o.c

scsi: dpt_i2o: remove redundant null check on array device

2017-08-10 19:55:35 -04:00

dpti.h

…

eata_generic.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

eata_pio.c

…

eata_pio.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

eata.c

scsi: eata: remove 'arg_done' from eata2x_eh_host_reset()

2017-08-25 17:21:12 -04:00

esp_scsi.c

scsi: esp_scsi: Always clear msg_out_len after MESSAGE OUT phase

2017-08-10 19:55:35 -04:00

esp_scsi.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

fdomain.c

scsi: fdomain: move bus reset to host reset

2017-08-25 17:21:10 -04:00

fdomain.h

scsi: fdomain: move bus reset to host reset

2017-08-25 17:21:10 -04:00

FlashPoint.c

…

g_NCR5380.c

scsi: NCR5380: Move bus reset to host reset

2017-08-25 17:21:11 -04:00

gdth_ioctl.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

gdth_proc.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

gdth_proc.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

gdth.c

scsi: gdth: avoid buffer overflow warning

2017-08-07 14:04:01 -04:00

gdth.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

gvp11.c

scsi: drop bus reset for wd33c93-compatible boards

2017-08-25 17:21:10 -04:00

gvp11.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

hosts.c

scsi: Remove Scsi_Host.uspace_req_q

2017-09-05 08:18:42 -04:00

hpsa_cmd.h

…

hpsa.c

scsi: hpsa: destroy sas transport properties before scsi_host

2017-12-20 10:10:33 +01:00

hpsa.h

scsi: hpsa: add support for legacy boards

2017-08-24 22:28:55 -04:00

hptiop.c

scsi: hptiop: Simplify reset handling

2017-08-25 17:21:10 -04:00

hptiop.h

…

imm.c

scsi: imm: drop duplicate bus_reset handler

2017-08-25 17:21:11 -04:00

imm.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

initio.c

…

initio.h

…

ipr.c

scsi: ipr: Set no_report_opcodes for RAID arrays

2017-08-22 22:23:36 -04:00

ipr.h

scsi: ipr: Fix scsi-mq lockdep issue

2017-08-08 11:49:51 -04:00

ips.c

…

ips.h

…

iscsi_boot_sysfs.c

…

iscsi_tcp.c

scsi: iscsi_tcp: Remove a set-but-not-used variable

2017-08-25 17:08:08 -04:00

iscsi_tcp.h

…

jazz_esp.c

…

Kconfig

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2017-09-13 10:47:14 -07:00

lasi700.c

parisc/scsi/lasi700: Fix section mismatches

2017-08-22 16:34:36 +02:00

libiscsi_tcp.c

…

libiscsi.c

scsi: libiscsi: fix shifting of DID_REQUEUE host byte

2017-10-11 13:32:35 -04:00

mac53c94.c

scsi: Convert to using %pOF instead of full_name

2017-08-07 14:04:02 -04:00

mac53c94.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mac_esp.c

scsi: mac_esp: Fix PIO transfers for MESSAGE IN phase

2017-08-10 19:55:34 -04:00

mac_scsi.c

scsi: NCR5380: Move bus reset to host reset

2017-08-25 17:21:11 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

megaraid.c

scsi: megaraid: fix format-overflow warning

2017-08-07 14:04:01 -04:00

megaraid.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mesh.c

…

mesh.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mvme16x_scsi.c

…

mvme147.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mvme147.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mvumi.c

…

mvumi.h

…

ncr53c8xx.c

…

ncr53c8xx.h

…

NCR53c406a.c

…

NCR5380.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

NCR5380.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

NCR_D700.c

…

NCR_D700.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

NCR_Q720.c

dma-coherent: remove the DMA_MEMORY_MAP and DMA_MEMORY_IO flags

2017-09-01 11:59:17 +02:00

NCR_Q720.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

nsp32_debug.c

…

nsp32_io.h

…

nsp32.c

scsi: nsp32: drop bus reset

2017-08-25 17:21:11 -04:00

nsp32.h

…

osst_detect.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

osst_options.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

osst.c

scsi: osst: silence underflow warning in osst_verify_frame()

2017-08-24 22:29:01 -04:00

osst.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

pmcraid.c

scsi: pmcraid: fix duplicated code for different branches

2017-08-24 22:29:05 -04:00

pmcraid.h

scsi: pmcraid: Replace PCI pool old API

2017-08-07 14:04:01 -04:00

ppa.c

scsi: ppa: drop duplicate bus_reset handler

2017-08-25 17:21:11 -04:00

ppa.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ps3rom.c

…

qla1280.c

…

qla1280.h

…

qlogicfas408.c

scsi: qlogicfas: move bus_reset to host_reset

2017-08-25 17:21:11 -04:00

qlogicfas408.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

qlogicfas.c

scsi: qlogicfas: move bus_reset to host_reset

2017-08-25 17:21:11 -04:00

qlogicpti.c

scsi: qlogicpti: fixup qlogicpti_reset() definition

2017-08-28 22:15:46 -04:00

qlogicpti.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

raid_class.c

…

script_asm.pl

…

scsi_common.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_debug.c

scsi: scsi_debug: write_same: fix error report

2017-12-20 10:10:28 +01:00

scsi_debugfs.c

scsi: core: Fix a scsi_show_rq() NULL pointer dereference

2017-12-20 10:10:20 +01:00

scsi_debugfs.h

…

scsi_devinfo.c

scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry

2017-12-20 10:10:34 +01:00

scsi_dh.c

…

scsi_error.c

scsi: ILLEGAL REQUEST + ASC==27 => target failure

2017-09-27 21:55:21 -04:00

scsi_ioctl.c

scsi: Suppress gcc 7 fall-through warnings reported with W=1

2017-08-25 17:08:07 -04:00

scsi_lib_dma.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_lib.c

scsi: use dma_get_cache_alignment() as minimum DMA alignment

2017-12-14 09:52:51 +01:00

scsi_logging.c

…

scsi_logging.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_module.c

…

scsi_netlink.c

…

scsi_pm.c

…

scsi_priv.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_proc.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_sas_internal.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_scan.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_sysctl.c

…

scsi_sysfs.c

scsi: fixup kernel warning during rmmod()

2017-10-06 14:48:55 -04:00

scsi_trace.c

…

scsi_transport_api.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsi_transport_fc.c

scsi: fc: check for rport presence in fc_block_scsi_eh

2017-10-11 14:33:12 -04:00

scsi_transport_iscsi.c

scsi: libiscsi: Remove iscsi_destroy_session

2017-10-02 22:23:21 -04:00

scsi_transport_sas.c

scsi: scsi_transport_sas: switch to bsg-lib for SMP passthrough

2017-08-29 21:51:45 -04:00

scsi_transport_spi.c

…

scsi_transport_srp.c

Revert "scsi: make 'state' device attribute pollable"

2017-11-07 09:04:32 -08:00

scsi_typedefs.h

…

scsi.c

Merge branch 'fixes' into misc

2017-09-07 12:12:43 -07:00

scsi.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

scsicam.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sd_dif.c

…

sd_zbc.c

scsi: sd_zbc: Fix sd_zbc_read_zoned_characteristics()

2017-11-30 08:40:50 +00:00

sd.c

scsi: sd: change allow_restart to bool in sysfs interface

2017-12-20 10:10:36 +01:00

sd.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sense_codes.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

ses.c

Merge branch 'fixes' into misc

2017-09-07 12:12:43 -07:00

sg.c

scsi: sg: Re-fix off by one in sg_fill_request_table()

2017-10-17 22:41:11 -04:00

sgiwd93.c

scsi: drop bus reset for wd33c93-compatible boards

2017-08-25 17:21:10 -04:00

sim710.c

…

sni_53c710.c

…

sr_ioctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sr_vendor.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

sr.c

scsi: sd: sr: Convert two assignments into warning statements

2017-08-25 17:08:08 -04:00

sr.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

st_options.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

st.c

scsi: st: fix blk_get_queue usage

2017-08-08 11:49:51 -04:00

st.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

stex.c

…

storvsc_drv.c

scsi: storvsc: fix memory leak on ring buffer busy

2017-08-30 21:53:13 -04:00

sun3_scsi_vme.c

…

sun3_scsi.c

scsi: NCR5380: Move bus reset to host reset

2017-08-25 17:21:11 -04:00

sun3x_esp.c

…

sun_esp.c

…

sym53c416.c

…

sym53c416.h

…

virtio_scsi.c

scsi: virtio: virtio_scsi: Set can_queue to the length of the virtqueue.

2017-08-24 22:28:51 -04:00

vmw_pvscsi.c

…

vmw_pvscsi.h

…

wd33c93.c

scsi: drop bus reset for wd33c93-compatible boards

2017-08-25 17:21:10 -04:00

wd33c93.h

…

wd719x.c

…

wd719x.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xen-scsifront.c

…

zalon.c

parisc/scsi/zalon: Fix section mismatches

2017-08-22 16:34:36 +02:00

zorro7xx.c

…