thebeanogamer / rpms / qemu-kvm

Forked from rpms/qemu-kvm 5 months ago
Clone
0727d3
From a9a4dfdd6312e192e9134d46edfac4c1b1bfa63d Mon Sep 17 00:00:00 2001
0727d3
From: Kevin Wolf <kwolf@redhat.com>
0727d3
Date: Mon, 22 Aug 2022 14:53:20 +0200
0727d3
Subject: [PATCH] scsi-generic: Fix emulated block limits VPD page
0727d3
0727d3
RH-Author: Kevin Wolf <kwolf@redhat.com>
0727d3
RH-MergeRequest: 212: scsi-generic: Fix emulated block limits VPD page
0727d3
RH-Commit: [1/1] d3ba6b2e03039043716ddc6b7d4a424d92249081
0727d3
RH-Bugzilla: 2120279
0727d3
RH-Acked-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
0727d3
RH-Acked-by: Hanna Reitz <hreitz@redhat.com>
0727d3
RH-Acked-by: Paolo Bonzini <pbonzini@redhat.com>
0727d3
RH-Acked-by: Stefan Hajnoczi <stefanha@redhat.com>
0727d3
0727d3
Commits 01ef8185b80 amd 24b36e9813e updated the way that the maximum
0727d3
transfer length is calculated for patching block limits VPD page in an
0727d3
INQUIRY response.
0727d3
0727d3
The same updates also need to be made for the case where the host device
0727d3
does not support the block limits VPD page at all and we emulate the
0727d3
whole page.
0727d3
0727d3
Without this fix, on host block devices a maximum transfer length of
0727d3
(INT_MAX - sector_size) bytes is advertised to the guest, resulting in
0727d3
I/O errors when a request that exceeds the host limits is made by the
0727d3
guest. (Prior to commit 24b36e9813e, this code path would use the
0727d3
max_transfer value from the host instead of INT_MAX, but still miss the
0727d3
fix from 01ef8185b80 where max_transfer is also capped to max_iov
0727d3
host pages, so it would be less wrong, but still wrong.)
0727d3
0727d3
Cc: qemu-stable@nongnu.org
0727d3
Buglink: https://bugzilla.redhat.com/show_bug.cgi?id=2096251
0727d3
Fixes: 01ef8185b809af9d287e1a03a3f9d8ea8231118a
0727d3
Fixes: 24b36e9813ec15da7db62e3b3621730710c5f020
0727d3
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
0727d3
Message-Id: <20220822125320.48257-1-kwolf@redhat.com>
0727d3
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
0727d3
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
0727d3
(cherry picked from commit 51e15194b0a091e5c40aab2eb234a1d36c5c58ee)
0727d3
0727d3
Resolved conflict: qemu_real_host_page_size() is a getter function in
0727d3
current upstream, but still just a public global variable downstream.
0727d3
0727d3
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
0727d3
---
0727d3
 hw/scsi/scsi-generic.c | 21 ++++++++++++++-------
0727d3
 1 file changed, 14 insertions(+), 7 deletions(-)
0727d3
0727d3
diff --git a/hw/scsi/scsi-generic.c b/hw/scsi/scsi-generic.c
0727d3
index 0306ccc7b1..3742899839 100644
0727d3
--- a/hw/scsi/scsi-generic.c
0727d3
+++ b/hw/scsi/scsi-generic.c
0727d3
@@ -147,6 +147,18 @@ static int execute_command(BlockBackend *blk,
0727d3
     return 0;
0727d3
 }
0727d3
 
0727d3
+static uint64_t calculate_max_transfer(SCSIDevice *s)
0727d3
+{
0727d3
+    uint64_t max_transfer = blk_get_max_hw_transfer(s->conf.blk);
0727d3
+    uint32_t max_iov = blk_get_max_hw_iov(s->conf.blk);
0727d3
+
0727d3
+    assert(max_transfer);
0727d3
+    max_transfer = MIN_NON_ZERO(max_transfer,
0727d3
+                                max_iov * qemu_real_host_page_size);
0727d3
+
0727d3
+    return max_transfer / s->blocksize;
0727d3
+}
0727d3
+
0727d3
 static int scsi_handle_inquiry_reply(SCSIGenericReq *r, SCSIDevice *s, int len)
0727d3
 {
0727d3
     uint8_t page, page_idx;
0727d3
@@ -179,12 +191,7 @@ static int scsi_handle_inquiry_reply(SCSIGenericReq *r, SCSIDevice *s, int len)
0727d3
         (r->req.cmd.buf[1] & 0x01)) {
0727d3
         page = r->req.cmd.buf[2];
0727d3
         if (page == 0xb0) {
0727d3
-            uint64_t max_transfer = blk_get_max_hw_transfer(s->conf.blk);
0727d3
-            uint32_t max_iov = blk_get_max_hw_iov(s->conf.blk);
0727d3
-
0727d3
-            assert(max_transfer);
0727d3
-            max_transfer = MIN_NON_ZERO(max_transfer, max_iov * qemu_real_host_page_size)
0727d3
-                / s->blocksize;
0727d3
+            uint64_t max_transfer = calculate_max_transfer(s);
0727d3
             stl_be_p(&r->buf[8], max_transfer);
0727d3
             /* Also take care of the opt xfer len. */
0727d3
             stl_be_p(&r->buf[12],
0727d3
@@ -230,7 +237,7 @@ static int scsi_generic_emulate_block_limits(SCSIGenericReq *r, SCSIDevice *s)
0727d3
     uint8_t buf[64];
0727d3
 
0727d3
     SCSIBlockLimits bl = {
0727d3
-        .max_io_sectors = blk_get_max_transfer(s->conf.blk) / s->blocksize
0727d3
+        .max_io_sectors = calculate_max_transfer(s),
0727d3
     };
0727d3
 
0727d3
     memset(r->buf, 0, r->buflen);
0727d3
-- 
0727d3
2.35.3
0727d3