Lee Duncan 54ef92
From: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
Lee Duncan 54ef92
Date: Fri, 11 Nov 2022 23:00:31 -0800
Lee Duncan 54ef92
Subject: scsi: scsi_debug: Fix a warning in resp_verify()
Lee Duncan 54ef92
Git-commit: ed0f17b748b20271cb568c7ca0b23b120316a47d
Lee Duncan 54ef92
Patch-mainline: v6.1 or v6.1-rc9 (next release)
Lee Duncan 54ef92
References: git-fixes
Lee Duncan 54ef92
Lee Duncan 54ef92
As 'vnum' is controlled by user, so if user tries to allocate memory larger
Lee Duncan 54ef92
than(>=) MAX_ORDER, then kcalloc() will fail, it creates a stack trace and
Lee Duncan 54ef92
messes up dmesg with a warning.
Lee Duncan 54ef92
Lee Duncan 54ef92
Add __GFP_NOWARN in order to avoid too large allocation warning.  This is
Lee Duncan 54ef92
detected by static analysis using smatch.
Lee Duncan 54ef92
Lee Duncan 54ef92
Fixes: c3e2fe9222d4 ("scsi: scsi_debug: Implement VERIFY(10), add VERIFY(16)")
Lee Duncan 54ef92
Signed-off-by: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
Lee Duncan 54ef92
Link: https://lore.kernel.org/r/20221112070031.2121068-1-harshit.m.mogalapalli@oracle.com
Lee Duncan 54ef92
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Lee Duncan 54ef92
Acked-by: Lee Duncan <lduncan@suse.com>
Lee Duncan 54ef92
---
Lee Duncan 54ef92
 drivers/scsi/scsi_debug.c | 2 +-
Lee Duncan 54ef92
 1 file changed, 1 insertion(+), 1 deletion(-)
Lee Duncan 54ef92
Lee Duncan 54ef92
diff --git a/drivers/scsi/scsi_debug.c b/drivers/scsi/scsi_debug.c
Lee Duncan 54ef92
index 273224d29ce9..f556e36a2e0d 100644
Lee Duncan 54ef92
--- a/drivers/scsi/scsi_debug.c
Lee Duncan 54ef92
+++ b/drivers/scsi/scsi_debug.c
Lee Duncan 54ef92
@@ -4429,7 +4429,7 @@ static int resp_verify(struct scsi_cmnd *scp, struct sdebug_dev_info *devip)
Lee Duncan 54ef92
 	if (ret)
Lee Duncan 54ef92
 		return ret;
Lee Duncan 54ef92
 
Lee Duncan 54ef92
-	arr = kcalloc(lb_size, vnum, GFP_ATOMIC);
Lee Duncan 54ef92
+	arr = kcalloc(lb_size, vnum, GFP_ATOMIC | __GFP_NOWARN);
Lee Duncan 54ef92
 	if (!arr) {
Lee Duncan 54ef92
 		mk_sense_buffer(scp, ILLEGAL_REQUEST, INSUFF_RES_ASC,
Lee Duncan 54ef92
 				INSUFF_RES_ASCQ);
Lee Duncan 54ef92