Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756720AbcCWUgX (ORCPT ); Wed, 23 Mar 2016 16:36:23 -0400 Received: from aserp1040.oracle.com ([141.146.126.69]:23151 "EHLO aserp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756554AbcCWUgV (ORCPT ); Wed, 23 Mar 2016 16:36:21 -0400 To: Calvin Owens Cc: Sathya Prakash , Chaitra P B , Suganath Prabu Subramani , "James E.J. Bottomley" , "Martin K. Petersen" , , , , Subject: Re: [PATCH] mpt3sas: Don't overreach ioc->reply_post[] during initialization From: "Martin K. Petersen" Organization: Oracle Corporation References: Date: Wed, 23 Mar 2016 16:36:08 -0400 In-Reply-To: (Calvin Owens's message of "Fri, 18 Mar 2016 12:45:42 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Source-IP: userv0021.oracle.com [156.151.31.71] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 518 Lines: 17 >>>>> "Calvin" == Calvin Owens writes: Calvin> In _base_make_ioc_operational(), we walk ioc->reply_queue_list Calvin> and pull a pointer out of successive elements of Calvin> ioc->reply_post[] for each entry in that list if RDPQ is Calvin> enabled. Calvin> Since the code pulls the pointer for the next iteration at the Calvin> bottom of the loop, it triggers the a KASAN dump on the final Calvin> iteration: Applied to 4.6/scsi-fixes. Thanks! -- Martin K. Petersen Oracle Linux Engineering