Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 25 Mar 2019 17:03:39 +0000 (UTC)
From:      David Bright <dab@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-12@freebsd.org
Subject:   svn commit: r345506 - stable/12/sys/dev/pms/RefTisa/tisa/sassata/sas/ini
Message-ID:  <201903251703.x2PH3dHC059331@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: dab
Date: Mon Mar 25 17:03:39 2019
New Revision: 345506
URL: https://svnweb.freebsd.org/changeset/base/345506

Log:
  MFC r345009:
  
  Fix a scribbler in the PMS driver.
  
  The ESGL bit was left uninitialized when executing the REPORT LUNS
  ioctl. This could allow a zeroed data buffer to be treated as a
  scatter/gather list. The firmware would eventually walk past the end
  of the data buffer, potentially find what looked like a valid
  address/length pair, and write the result to semi-random memory.
  
  Obtained from:  Dell EMC Isilon
  Sponsored by:   Dell EMC Isilon

Modified:
  stable/12/sys/dev/pms/RefTisa/tisa/sassata/sas/ini/itdio.c
Directory Properties:
  stable/12/   (props changed)

Modified: stable/12/sys/dev/pms/RefTisa/tisa/sassata/sas/ini/itdio.c
==============================================================================
--- stable/12/sys/dev/pms/RefTisa/tisa/sassata/sas/ini/itdio.c	Mon Mar 25 16:40:54 2019	(r345505)
+++ stable/12/sys/dev/pms/RefTisa/tisa/sassata/sas/ini/itdio.c	Mon Mar 25 17:03:39 2019	(r345506)
@@ -1874,7 +1874,9 @@ tiNumOfLunIOCTLreq(
       
     agSSPFrame->dataLength = REPORT_LUN_LEN;
     agSSPFrame->agSgl.len =	sizeof(agsaSSPCmdInfoUnit_t);
-    
+    agSSPFrame->agSgl.extReserved = 0;
+    CLEAR_ESGL_EXTEND(agSSPFrame->agSgl.extReserved);
+
     status = saSSPStart(agRoot, agIORequest, 0, agDevHandle, agRequestType,agSASRequestBody,agNULL,
     										   &ossaSSPIoctlCompleted);
     if(status != AGSA_RC_SUCCESS)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201903251703.x2PH3dHC059331>