On Mon, 29 Jun 2020 11:37:56 +0200, Bodo Stroesser wrote:
> If tcmu_handle_completions() has to process a padding shorter
> than sizeof(struct tcmu_cmd_entry), the current call to
> tcmu_flush_dcache_range() with sizeof(struct tcmu_cmd_entry) as
> length param is wrong and causes crashes on e.g. ARM, because
> tcmu_flush_dcache_range() in this case calls
> flush_dcache_page(vmalloc_to_page(start));
> with start being an invalid address above the end of the
> vmalloc'ed area.
>
> [...]
Applied to 5.9/scsi-queue, thanks!
[1/1] scsi: target: tcmu: Fix crash on ARM during cmd completion
https://git.kernel.org/mkp/scsi/c/5a0c256d96f0
--
Martin K. Petersen Oracle Linux Engineering
