linux-kernel - Re: [PATCH] firewire: sbp-target: fix integer type overflow in sbp_make

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <176922663892.2974474.16494984426834537522.b4-ty@oracle.com>
Date: Fri, 23 Jan 2026 22:53:27 -0500
From: "Martin K. Petersen" <martin.petersen@...cle.com>
To: bootc@...tc.net, Kery Qi <qikeyu2017@...il.com>
Cc: "Martin K . Petersen" <martin.petersen@...cle.com>, nab@...ux-iscsi.org,
        stefanr@...6.in-berlin.de, linux-scsi@...r.kernel.org,
        target-devel@...r.kernel.org, linux1394-devel@...ts.sourceforge.net,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH] firewire: sbp-target: fix integer type overflow in sbp_make_tpg()

On Wed, 21 Jan 2026 19:45:15 +0800, Kery Qi wrote:

> The code in sbp_make_tpg() limits "tpgt" to UINT_MAX but the data type
> of "tpg->tport_tpgt" is u16. This causes a type truncation issue.
> 
> When a user creates a TPG via configfs mkdir, for example:
> 
>     mkdir /sys/kernel/config/target/sbp/<wwn>/tpgt_70000
> 
> [...]

Applied to 6.19/scsi-fixes, thanks!

[1/1] firewire: sbp-target: fix integer type overflow in sbp_make_tpg()
      https://git.kernel.org/mkp/scsi/c/b2d6b1d44300

-- 
Martin K. Petersen