diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2015-05-22 18:15:30 -0400 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2015-05-22 18:15:30 -0400 |
| commit | 1c8df7bd48347a707b437cfd0dad6b08a3b89ab6 (patch) | |
| tree | 6b851006a791d0595061600b1685d4db7e85f1f7 /drivers | |
| parent | a30ec4b347192f65e811b0b165ef08fa1ba379c4 (diff) | |
| parent | 10d784eae2b41e25d8fc6a88096cd27286093c84 (diff) | |
Merge branch 'for-linus' of git://git.kernel.dk/linux-block
Pull block fixes from Jens Axboe:
"Three small fixes that have been picked up the last few weeks.
Specifically:
- Fix a memory corruption issue in NVMe with malignant user
constructed request. From Christoph.
- Kill (now) unused blk_queue_bio(), dm was changed to not need this
anymore. From Mike Snitzer.
- Always use blk_schedule_flush_plug() from the io_schedule() path
when flushing a plug, fixing a !TASK_RUNNING warning with md. From
Shaohua"
* 'for-linus' of git://git.kernel.dk/linux-block:
sched: always use blk_schedule_flush_plug in io_schedule_out
nvme: fix kernel memory corruption with short INQUIRY buffers
block: remove export for blk_queue_bio
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/block/nvme-scsi.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/drivers/block/nvme-scsi.c b/drivers/block/nvme-scsi.c index 88f13c525712..44f2514fb775 100644 --- a/drivers/block/nvme-scsi.c +++ b/drivers/block/nvme-scsi.c | |||
| @@ -2257,7 +2257,8 @@ static int nvme_trans_inquiry(struct nvme_ns *ns, struct sg_io_hdr *hdr, | |||
| 2257 | page_code = GET_INQ_PAGE_CODE(cmd); | 2257 | page_code = GET_INQ_PAGE_CODE(cmd); |
| 2258 | alloc_len = GET_INQ_ALLOC_LENGTH(cmd); | 2258 | alloc_len = GET_INQ_ALLOC_LENGTH(cmd); |
| 2259 | 2259 | ||
| 2260 | inq_response = kmalloc(alloc_len, GFP_KERNEL); | 2260 | inq_response = kmalloc(max(alloc_len, STANDARD_INQUIRY_LENGTH), |
| 2261 | GFP_KERNEL); | ||
| 2261 | if (inq_response == NULL) { | 2262 | if (inq_response == NULL) { |
| 2262 | res = -ENOMEM; | 2263 | res = -ENOMEM; |
| 2263 | goto out_mem; | 2264 | goto out_mem; |
