diff options
| author | Chandrakanth Patil <chandrakanth.patil@broadcom.com> | 2026-08-26 02:33:59 +0530 |
|---|---|---|
| committer | Martin K. Petersen (Oracle) <mkp@kernel.org> | 2026-09-09 22:08:15 -0400 |
| commit | 9ff1af19c488efad66f2b803eefa0abd5fdac8f4 (patch) | |
| tree | c03d6c076afd8fcb904f91f71df139189092761e /tools/perf/scripts/python | |
| parent | f0ec04bdf6156ed2ae7d86a8819dafdd9383b705 (diff) | |
| download | linux-next-9ff1af19c488efad66f2b803eefa0abd5fdac8f4.tar.gz linux-next-9ff1af19c488efad66f2b803eefa0abd5fdac8f4.zip | |
scsi: mpi3mr: Fix buffer overflow when caching log data
Each log data slot holds a header followed by the payload, but the copy was
sized against the whole slot and so wrote one header length past the end of
it. Subtracting the header on its own is not enough either, because the
entry size is derived from the controller reply size and can be smaller
than the header.
Work out the payload room first and clamp the copy to it.
Fixes: 43ca11005098 ("scsi: mpi3mr: Add support for PEL commands")
Signed-off-by: Chandrakanth Patil <chandrakanth.patil@broadcom.com>
Link: https://patch.msgid.link/20260825210411.301535-6-chandrakanth.patil@broadcom.com
Signed-off-by: Martin K. Petersen (Oracle) <mkp@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions