Patch "s390/qeth: fix error handling in checksum cmd callback" has been added to the 4.14-stable tree
Subsystems (4)
This is a note to let you know that I've just added the patch titled
s390/qeth: fix error handling in checksum cmd callback
to the 4.14-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
s390-qeth-fix-error-handling-in-checksum-cmd-callback.patch
and it can be found in the queue-4.14 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From foo@baz Sun Dec 31 11:12:48 CET 2017
From: Julian Wiedmann <[email protected]>
Date: Wed, 20 Dec 2017 18:07:18 +0100
Subject: s390/qeth: fix error handling in checksum cmd callback
From: Julian Wiedmann <[email protected]>
[ Upstream commit ad3cbf61332914711e5f506972b1dc9af8d62146 ]
Make sure to check both return code fields before processing the response. Otherwise we risk operating on invalid data.
--- drivers/s390/net/qeth_core_main.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)
drivers/s390/net/qeth_core_main.c +8 -1
@@ -5445,6 +5445,13 @@ out: }EXPORT_SYMBOL_GPL (qeth_poll); +static int qeth_setassparms_inspect_rc (struct qeth_ipa_cmd *cmd) +{ +if (!cmd->hdr.return_code) + cmd->hdr.return_code = cmd->data.setassparms.hdr.return_code; +return cmd->hdr.return_code; +} +int qeth_setassparms_cb (struct qeth_card *card,struct qeth_reply *reply,unsigned long data) {
@@ -6304,7 +6311,7 @@ static int qeth_ipa_checksum_run_cmd_cb( (struct qeth_checksum_cmd *)reply->param;QETH_CARD_TEXT (card,4 ,"chkdoccb" ); -if (cmd->hdr.return_code) +if (qeth_setassparms_inspect_rc (cmd))return 0 ;memset (chksum_cb,0 ,sizeof (*chksum_cb));
Patches currently in stable-queue which might be from [email protected] are
queue-4.14/s390-qeth-lock-ip-table-while-applying-takeover-changes.patch queue-4.14/s390-qeth-fix-error-handling-in-checksum-cmd-callback.patch queue-4.14/s390-qeth-apply-takeover-changes-when-mode-is-toggled.patch queue-4.14/s390-qeth-update-takeover-ips-after-configuration-change.patch queue-4.14/s390-qeth-don-t-apply-takeover-changes-to-rxip.patch