[Bug 215943] UBSAN: array-index-out-of-bounds in drivers/scsi/megaraid/megaraid_sas_fp.c:103:32

[bugzilla-daemon@kernel.org]

https://bugzilla.kernel.org/show_bug.cgi?id=215943

darren.armstrong85@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darren.armstrong85@gmail.co
                   |                            |m

--- Comment #1 from darren.armstrong85@gmail.com ---
Created attachment 300986
  --> https://bugzilla.kernel.org/attachment.cgi?id=300986&action=edit
drivers: scsi: megaraid: fix ldSpanMap array declarations

It looks like ldSpanMap arrays are being declared with a length of 1 whilst the
accompanying ldTgtIdToLd lookup is set up using max limits.

This looks to be quite old code (2010) which makes me a bit suspicious that
I've missed something about how this works.  But I couldn't find anything in
the current source or commit logs to explain why it was this way.  So it looks
like an honest oversight from what I can tell.

I've attached a patch that matches lengths between ldSpanMap and ldTgtIdToLd in
the two cases I was able to identify.  Is it possible to test with this patch
applied?

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are the assignee for the bug.