diff options
| author | YunJe Shin <yjshin0438@gmail.com> | 2026-01-28 09:41:07 +0900 |
|---|---|---|
| committer | Keith Busch <kbusch@kernel.org> | 2026-02-05 07:29:10 -0800 |
| commit | 52a0a98549344ca20ad81a4176d68d28e3c05a5c (patch) | |
| tree | 09fc8b4daf23a0bce36d3c71a29832d9477f277c /tools/perf/scripts/python | |
| parent | nvme-pci: handle changing device dma map requirements (diff) | |
| download | linux-52a0a98549344ca20ad81a4176d68d28e3c05a5c.tar.gz linux-52a0a98549344ca20ad81a4176d68d28e3c05a5c.zip | |
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU
length or offset exceeds sg_cnt and then use bogus sg->length/offset
values, leading to _copy_to_iter() GPF/KASAN. Guard sg_idx, remaining
entries, and sg->length/offset before building the bvec.
Fixes: 872d26a391da ("nvmet-tcp: add NVMe over TCP target driver")
Signed-off-by: YunJe Shin <ioerts@kookmin.ac.kr>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Reviewed-by: Joonkyo Jung <joonkyoj@yonsei.ac.kr>
Signed-off-by: Keith Busch <kbusch@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions