From: Shivasharan S Date: Wed, 23 Aug 2017 11:47:01 +0000 (-0700) Subject: scsi: megaraid_sas: Check valid aen class range to avoid kernel panic X-Git-Tag: v4.1.12-124.31.3~1061 X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=ef4ea26c811f3cbd887720bda1de3fa5b1535f76;p=users%2Fjedix%2Flinux-maple.git scsi: megaraid_sas: Check valid aen class range to avoid kernel panic Signed-off-by: Kashyap Desai Signed-off-by: Shivasharan S Cc: stable@vger.kernel.org Reviewed-by: Hannes Reinecke Reviewed-by: Tomas Henzl Signed-off-by: Martin K. Petersen Orabug: 27625001 Signed-off-by: Jack Vogel Reviewed-by: Martin K. Petersen --- diff --git a/drivers/scsi/megaraid/megaraid_sas_base.c b/drivers/scsi/megaraid/megaraid_sas_base.c index 82efd0585f99..355d71826382 100644 --- a/drivers/scsi/megaraid/megaraid_sas_base.c +++ b/drivers/scsi/megaraid/megaraid_sas_base.c @@ -5655,6 +5655,14 @@ megasas_register_aen(struct megasas_instance *instance, u32 seq_num, prev_aen.word = le32_to_cpu(instance->aen_cmd->frame->dcmd.mbox.w[1]); + if ((curr_aen.members.class < MFI_EVT_CLASS_DEBUG) || + (curr_aen.members.class > MFI_EVT_CLASS_DEAD)) { + dev_info(&instance->pdev->dev, + "%s %d out of range class %d send by application\n", + __func__, __LINE__, curr_aen.members.class); + return 0; + } + /* * A class whose enum value is smaller is inclusive of all * higher values. If a PROGRESS (= -1) was previously