linux-hardening - Re: [PATCH] Revert "scsi: qla2xxx: Fix memcpy() field-spanning write issue"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <fcdb0a83-3b1c-42bd-b58b-b501cfbf27fa@embeddedor.com>
Date: Thu, 25 Sep 2025 15:38:37 +0200
From: "Gustavo A. R. Silva" <gustavo@...eddedor.com>
To: John Meneghini <jmeneghi@...hat.com>, martin.petersen@...cle.com
Cc: axboe@...nel.dk, bgurney@...hat.com, emilne@...hat.com,
 gustavoars@...nel.org, hare@...e.de, hch@....de, james.smart@...adcom.com,
 kbusch@...nel.org, kees@...nel.org, linux-hardening@...r.kernel.org,
 linux-nvme@...ts.infradead.org, linux-scsi@...r.kernel.org,
 njavali@...vell.com, sagi@...mberg.me
Subject: Re: [PATCH] Revert "scsi: qla2xxx: Fix memcpy() field-spanning write
 issue"

On 9/25/25 15:07, John Meneghini wrote:
> This reverts commit 6f4b10226b6b1e7d1ff3cdb006cf0f6da6eed71e.
> 
> We've been testing this patch and it turns out there is a significant
> bug here. This leaks memory and causes a driver hang.
> 
> Link:
> https://lore.kernel.org/linux-scsi/yq1zfajqpec.fsf@ca-mkp.ca.oracle.com/

Thanks for the report. I wonder if you have any logs or something I could
look at to figure out what's going on.

Bryan,

Could you please share how this patch[1] was tested?

Thanks
-Gustavo

[1] https://lore.kernel.org/linux-scsi/20250813200744.17975-10-bgurney@redhat.com/