linux-hardening - Re: [PATCH RFC] scsi: qla2xxx: zero default_item last in qla24xx_free_purex

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <39cb2084-db12-461d-8c9b-17fd48d5c682@embeddedor.com>
Date: Thu, 25 Sep 2025 20:54:03 +0200
From: "Gustavo A. R. Silva" <gustavo@...eddedor.com>
To: Bryan Gurney <bgurney@...hat.com>, jmeneghi@...hat.com
Cc: linux-nvme@...ts.infradead.org, kbusch@...nel.org, hch@....de,
 sagi@...mberg.me, axboe@...nel.dk, james.smart@...adcom.com,
 njavali@...vell.com, linux-scsi@...r.kernel.org, hare@...e.de,
 linux-hardening@...r.kernel.org, kees@...nel.org, gustavoars@...nel.org,
 emilne@...hat.com
Subject: Re: [PATCH RFC] scsi: qla2xxx: zero default_item last in
 qla24xx_free_purex_item

>> I see. I think it's probably better to go ahead with the revert, and then apply
>> the patch I proposed in my previous e-mail (it's more straightforward and introduces
>> fewer changes).
>>
>> If you agree with that, I can submit both the revert and the patch.
>>
>> Thanks
>> -Gustavo
>>
> 
> Hi Gustavo,
> 
> I just built a kernel with your patch, on top of the NVMe FPIN link
> integrity v9 patch set, and a test run on qla2xxx passes without any
> field-spanning write warnings, nor with any null pointer dereference
> errors.

Awesome. Thanks so much for testing it, Bryan. :)

Okay, so I'll go ahead and ACK the revert submitted by John (so as not
to duplicate efforts), and once it's applied, I'll submit the proposed
patch.

Thank you, folks.
-Gustavo