Blame SOURCES/0026-scsi-scsi-qla2xxx-Fix-panic-in-qla_dfs_tgt_counters_.patch

3d7c23
From bff74ada05ccf29f8d1a91835accc21385a9ec3a Mon Sep 17 00:00:00 2001
3d7c23
From: Himanshu Madhani <hmadhani@redhat.com>
3d7c23
Date: Thu, 1 Aug 2019 15:54:46 -0400
3d7c23
Subject: [PATCH 026/124] [scsi] scsi: qla2xxx: Fix panic in
3d7c23
 qla_dfs_tgt_counters_show
3d7c23
3d7c23
Message-id: <20190801155618.12650-27-hmadhani@redhat.com>
3d7c23
Patchwork-id: 267803
3d7c23
O-Subject: [RHEL 7.8 e-stor PATCH 026/118] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show
3d7c23
Bugzilla: 1729270
3d7c23
RH-Acked-by: Jarod Wilson <jarod@redhat.com>
3d7c23
RH-Acked-by: Tony Camuso <tcamuso@redhat.com>
3d7c23
3d7c23
From: Bill Kuzeja <William.Kuzeja@stratus.com>
3d7c23
3d7c23
Bugzilla 1729270
3d7c23
3d7c23
When trying to display tgt_counters in the debugfs, a panic can result.
3d7c23
3d7c23
There is no null check for qpair after it is assigned in the for-loop.
3d7c23
Unless vha->hw->queue_pair_map array is completely filled with entries, the
3d7c23
system will panic dereferencing a null pointer.
3d7c23
3d7c23
Signed-off-by: Bill Kuzeja <william.kuzeja@stratus.com>
3d7c23
Acked-by: Himanshu Madhani <hmadhani@marvell.com>
3d7c23
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
3d7c23
(cherry picked from commit db0f166e9a37215b15d5d732c98fa15219adccf0)
3d7c23
Signed-off-by: Himanshu Madhani <hmadhani@redhat.com>
3d7c23
Signed-off-by: Jan Stancek <jstancek@redhat.com>
3d7c23
---
3d7c23
 drivers/scsi/qla2xxx/qla_dfs.c | 2 ++
3d7c23
 1 file changed, 2 insertions(+)
3d7c23
3d7c23
diff --git a/drivers/scsi/qla2xxx/qla_dfs.c b/drivers/scsi/qla2xxx/qla_dfs.c
3d7c23
index 8688372955a0..2903d1e1847d 100644
3d7c23
--- a/drivers/scsi/qla2xxx/qla_dfs.c
3d7c23
+++ b/drivers/scsi/qla2xxx/qla_dfs.c
3d7c23
@@ -193,6 +193,8 @@ qla_dfs_tgt_counters_show(struct seq_file *s, void *unused)
3d7c23
 
3d7c23
 	for (i = 0; i < vha->hw->max_qpairs; i++) {
3d7c23
 		qpair = vha->hw->queue_pair_map[i];
3d7c23
+		if (!qpair)
3d7c23
+			continue;
3d7c23
 		qla_core_sbt_cmd += qpair->tgt_counters.qla_core_sbt_cmd;
3d7c23
 		core_qla_que_buf += qpair->tgt_counters.core_qla_que_buf;
3d7c23
 		qla_core_ret_ctio += qpair->tgt_counters.qla_core_ret_ctio;
3d7c23
-- 
3d7c23
2.13.6
3d7c23