linux.git/drivers/scsi/aacraid, branch v4.13

scsi: aacraid: Fix out of bounds in aac_get_name_resp

2017-08-17T00:01:31+00:00

We terminate the aac_get_name_resp on a byte that is outside the bounds
of the structure. Extend the return response by one byte to remove the
out of bounds reference.

Fixes: b836439faf04 ("aacraid: 4KB sector support")
Reported-by: Dan Carpenter 
Signed-off-by: David Carroll 
Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: Bart Van Assche 
Signed-off-by: Martin K. Petersen

scsi: aacraid: reading out of bounds

2017-07-27T02:09:21+00:00

"qd.id" comes directly from the copy_from_user() on the line before so
we should verify that it's within bounds.

Signed-off-by: Dan Carpenter 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Don't copy uninitialized stack memory to userspace

2017-06-26T19:01:03+00:00

Both aac_send_raw_srb() and aac_get_hba_info() may copy stack allocated
structs to userspace without initializing all members of these
structs. Clear out this memory to prevent information leaks.

Fixes: 423400e64d377 ("scsi: aacraid: Include HBA direct interface")
Fixes: c799d519bf088 ("scsi: aacraid: Retrieve HBA host information ioctl")
Signed-off-by: Seth Forshee 
Reviewed-by: Johannes Thumshirn 
Signed-off-by: Martin K. Petersen

scsi: aacraid: fix leak of data from stack back to userspace

2017-06-26T16:32:15+00:00

The fields sense_data_size and sense_data are unitialized garbage from
the stack and are being copied back to userspace.  Fix this leak of
stack information by ensuring they are zero'd.

Detected by CoverityScan, CID#1435473 ("Uninitialized scalar variable")

Fixes: 423400e64d377 ("scsi: aacraid: Include HBA direct interface")
Signed-off-by: Colin Ian King 
Acked-by: Dave Carroll 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Update driver version to 50834

2017-06-13T00:48:00+00:00

Update the driver version to 50834

Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: David Carroll 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Remove reference to Series-9

2017-06-13T00:48:00+00:00

Remove reference to Series-9 HBA and created arc ctrl check function.

Signed-off-by: Prasad B Munirathnam 
Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: David Carroll 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Add reset debugging statements

2017-06-13T00:48:00+00:00

Added info and error messages in controller reset function to log
information about the status of the IOP/SOFT reset.

Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: David Carroll 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Enable ctrl reset for both hba and arc

2017-06-13T00:48:00+00:00

Make sure that IOP and SOFT reset are enabled for both for both arc and
hba1000 controllers.

Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: David Carroll 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Make sure ioctl returns on controller reset

2017-06-13T00:48:00+00:00

Made sure that ioctl commands return in case of a controller reset.

Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: Dave Carroll 
Signed-off-by: Martin K. Petersen

scsi: aacraid: Use correct function to get ctrl health

2017-06-13T00:48:00+00:00

The command thread checks the ctrl health periodically before sending
updates to the controller. The function that it uses is aac_check_health
which does more than get the health status.

Signed-off-by: Raghava Aditya Renukunta 
Reviewed-by: David Carroll 
Signed-off-by: Martin K. Petersen