aboutsummaryrefslogtreecommitdiffstatshomepage
diff options
context:
space:
mode:
authorBikash Hazarika <bhazarika@marvell.com>2023-06-07 17:08:37 +0530
committerMartin K. Petersen <martin.petersen@oracle.com>2023-06-14 22:06:01 -0400
commit464ea494a40c6e3e0e8f91dd325408aaf21515ba (patch)
tree292f833e2173e90381acdcbf319a4db93a0b03de
parentscsi: qla2xxx: Array index may go out of bound (diff)
downloadwireguard-linux-464ea494a40c6e3e0e8f91dd325408aaf21515ba.tar.xz
wireguard-linux-464ea494a40c6e3e0e8f91dd325408aaf21515ba.zip
scsi: qla2xxx: Fix potential NULL pointer dereference
Klocwork tool reported 'cur_dsd' may be dereferenced. Add fix to validate pointer before dereferencing the pointer. Cc: stable@vger.kernel.org Signed-off-by: Bikash Hazarika <bhazarika@marvell.com> Signed-off-by: Nilesh Javali <njavali@marvell.com> Link: https://lore.kernel.org/r/20230607113843.37185-3-njavali@marvell.com Reviewed-by: Himanshu Madhani <himanshu.madhani@oracle.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
-rw-r--r--drivers/scsi/qla2xxx/qla_iocb.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/drivers/scsi/qla2xxx/qla_iocb.c b/drivers/scsi/qla2xxx/qla_iocb.c
index 6acfdcc48b16..a1675f056a5c 100644
--- a/drivers/scsi/qla2xxx/qla_iocb.c
+++ b/drivers/scsi/qla2xxx/qla_iocb.c
@@ -607,7 +607,8 @@ qla24xx_build_scsi_type_6_iocbs(srb_t *sp, struct cmd_type_6 *cmd_pkt,
put_unaligned_le32(COMMAND_TYPE_6, &cmd_pkt->entry_type);
/* No data transfer */
- if (!scsi_bufflen(cmd) || cmd->sc_data_direction == DMA_NONE) {
+ if (!scsi_bufflen(cmd) || cmd->sc_data_direction == DMA_NONE ||
+ tot_dsds == 0) {
cmd_pkt->byte_count = cpu_to_le32(0);
return 0;
}