linux-stable/drivers/scsi/mvsas
James Bottomley 56cbd0ccc1 mvsas: fix panic on expander attached SATA devices
mvsas is giving a General protection fault when it encounters an expander
attached ATA device.  Analysis of mvs_task_prep_ata() shows that the driver is
assuming all ATA devices are locally attached and obtaining the phy mask by
indexing the local phy table (in the HBA structure) with the phy id.  Since
expanders have many more phys than the HBA, this is causing the index into the
HBA phy table to overflow and returning rubbish as the pointer.

mvs_task_prep_ssp() instead does the phy mask using the port properties.
Mirror this in mvs_task_prep_ata() to fix the panic.

Reported-by: Adam Talbot <ajtalbot1@gmail.com>
Tested-by: Adam Talbot <ajtalbot1@gmail.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-04-17 10:19:07 -07:00
..
Kconfig [SCSI] mvsas: Add support for interrupt tasklet 2011-07-26 12:59:55 +04:00
Makefile [SCSI] mvsas: add support for Task collector mode and fixed relative bugs 2011-05-01 12:08:03 -05:00
mv_64xx.c Drivers: scsi: remove __dev* attributes. 2013-01-03 15:57:01 -08:00
mv_64xx.h [SCSI] mvsas: add support for Task collector mode and fixed relative bugs 2011-05-01 12:08:03 -05:00
mv_94xx.c drivers: scsi: mvsas: fix compiling issue by adding 'MVS_' for "enum pci_interrupt_cause" 2014-06-20 08:22:39 +08:00
mv_94xx.h drivers: scsi: mvsas: fix compiling issue by adding 'MVS_' for "enum pci_interrupt_cause" 2014-06-20 08:22:39 +08:00
mv_chips.h Drivers: scsi: remove __dev* attributes. 2013-01-03 15:57:01 -08:00
mv_defs.h [SCSI] mvsas: fixed SMP request watchdog timeout issue. 2011-10-02 13:18:01 -05:00
mv_init.c scsi: remove ->change_queue_type method 2014-12-04 09:55:45 +01:00
mv_sas.c mvsas: fix panic on expander attached SATA devices 2015-04-17 10:19:07 -07:00
mv_sas.h libsas: remove task_collector mode 2014-11-27 16:40:24 +01:00