[ Upstream commit 77541f78eadfe9fdb018a7b8b69f0f2af2cf4b82 ] The list_for_each_entry() iterator, "adapter" in this code, can never be NULL. If we exit the loop without finding the correct adapter then "adapter" points invalid memory that is an offset from the list head. This will eventually lead to memory corruption and presumably a kernel crash. Link: https://lore.kernel.org/r/20210708074642.23599-1-harshvardhan.jha@oracle.com Acked-by: Sumit Saxena <sumit.saxena@broadcom.com> Signed-off-by: Harshvardhan Jha <harshvardhan.jha@oracle.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
---|---|---|
.. | ||
Kconfig.megaraid | ||
Makefile | ||
mbox_defs.h | ||
mega_common.h | ||
megaraid_ioctl.h | ||
megaraid_mbox.c | ||
megaraid_mbox.h | ||
megaraid_mm.c | ||
megaraid_mm.h | ||
megaraid_sas_base.c | ||
megaraid_sas_debugfs.c | ||
megaraid_sas_fp.c | ||
megaraid_sas_fusion.c | ||
megaraid_sas_fusion.h | ||
megaraid_sas.h |