Re: [PATCH] scsi: megaraid_sas: fix PRP list out-of-bounds write

On 4/21/26 04:47, Martin K. Petersen wrote:
> 
>> megasas_make_prp_nvme() builds NVMe PRP lists in cmd->sg_frame,
>> which is a DMA-pool allocation sized by instance->max_chain_frame_sz.
> 
> Broadcom: Please comment and review!

Martin, do you know if someone there ever looked into this regression
and the proposed fix? I'm wondering because Daniel and Mats reported
problems under the same subject line (in new threads), but also didn't
get a reply. So together with the one from Lukasz aka "me" we afaics
have three reports now:

https://lore.kernel.org/all/GPhsSM0vkgyIrs0DIZ62qeUZX7X4RxwQXVKiuvMx-lHQVSPDxpztUyQOGS0xikqvJ-Z94hMV-dW_5KN_0CX2hsfV7kTf_t0MTf6vdAAaSEc=@magik.net/
https://lore.kernel.org/all/[email protected]/
https://lore.kernel.org/all/[email protected]/

Side note: I still wonders if we somehow could fix this by reverting
something, but none of the reports afaics references which change
introduced the problem. And given that the problem already exists in
6.18 a clean and quick revert is unlikely anayway. :-/

Ciao, Thorsten