Avri, > For the rpmb unit descriptor, if the field offset is larger than 0x23, > it may trigger a stack corruption because a) we do not log properly the > rpmb unit descriptor size, and b) ufs_is_valid_unit_desc_lun() test for > specific wb offset case, and does not verify that the requested field > does not exceed the descriptor size. Please rebase on top of 5.15/scsi-staging and fix the resulting errors. Thanks! -- Martin K. Petersen Oracle Linux Engineering
