090507157f
Seen: kernel BUG at arch/i386/lib/usercopy.c:872 under a 2.6.18-8.el5 kernel. Traced it to a garbage-in/garbage-out ioctl condition in the aacraid driver. Adaptec's special ioctl scb passthrough needs to check the validity of the individual scatter gather count fields to the maximum the adapter supports. Doing so will have the side effect of preventing copy_from_user() from bugging out while populating the dma buffers. This is a hardening effort, issue was triggered by an errant version of the management tools and thus the BUG should not be seen in the field. [jejb: fixed up compile failure] Signed-off-by: Mark Salyzyn <aacraid@adaptec.com> Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com> |
||
|---|---|---|
| .. | ||
| aachba.c | ||
| aacraid.h | ||
| commctrl.c | ||
| comminit.c | ||
| commsup.c | ||
| dpcsup.c | ||
| linit.c | ||
| Makefile | ||
| nark.c | ||
| rkt.c | ||
| rx.c | ||
| sa.c | ||
| TODO | ||