BUG_ON on kernel misbehavior on A100U2W driver

With broken Sparc64 IOMMU accounting, the kernel submits larger requests then allowed. Better to crash on BUG than corrupt memory. Signed-off-by: Mikulas Patocka <[email protected]> Acked-by: James Bottomley <[email protected]> Signed-off-by: Linus Torvalds <[email protected]>
akeromi · Jul 15, 2008 · a5db334 · a5db334
1 parent 56d387e
commit a5db334
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/drivers/scsi/a100u2w.c b/drivers/scsi/a100u2w.c
@@ -866,6 +866,7 @@ static void inia100_build_scb(struct orc_host * host, struct orc_scb * scb, stru
 
 	count_sg = scsi_dma_map(cmd);
 	BUG_ON(count_sg < 0);
+	BUG_ON(count_sg > TOTAL_SG_ENTRY);
 
 	/* Build the scatter gather lists */
 	if (count_sg) {