On Thu, 28 May 2020 10:56:17 -0400, Suganath Prabu S wrote:
> Replace dma_pool_alloc and memset with dma_pool_zalloc.
> This fixes memset accessing out of range address when reply_queue
> count is less than RDPQ_MAX_INDEX_IN_ONE_CHUNK (i.e. 16) in non-RDPQ
> mode.
>
> In non-RDPQ mode, the driver allocates a single contiguous pool of
> size reply_queue's count * reqly_post_free_sz. But here the driver is
> always memsetting this pool with size 16 * reqly_post_free_sz. so if
> reply queue count is less then 16 (i.e. when msix vectors enabled is
> less then 16) then the driver is accessing out of range address and
> this results in 'BUG: unable to handle kernel paging request at
> fff0x...x' bug.
>
> [...]
Applied to 5.8/scsi-queue, thanks!
[1/1] scsi: mpt3sas: Fix memset() in non-RDPQ mode
https://git.kernel.org/mkp/scsi/c/61e6ba03ea26
--
Martin K. Petersen Oracle Linux Engineering
