nvme driver will iterate beyond the end of the DMA cookie chain
Function nvme_fill_prp() iterates beyond the last DMA cookie using ddi_dma_nextcookie().
It doesn't attempt to use anything beyond the end, but it will cause a panic post integration of IPD 13
Updated by Electric Monk over 2 years ago
- Status changed from In Progress to Closed
- % Done changed from 80 to 100
commit 709d065fa472580d0fd685caa2fe31c61c2fa25c Author: Paul Winder <email@example.com> Date: 2020-01-21T15:27:50.000Z 12209 nvme driver will iterate beyond the end of the DMA cookie chain Reviewed by: Robert Mustacchi <firstname.lastname@example.org> Reviewed by: Garrett D'Amore <email@example.com> Approved by: Dan McDonald <firstname.lastname@example.org>