summaryrefslogtreecommitdiff
path: root/block
diff options
context:
space:
mode:
authorGreg Joyce <gjoyce@linux.ibm.com>2024-02-17 00:04:17 +0300
committerSasha Levin <sashal@kernel.org>2024-03-27 01:20:26 +0300
commit6fb80b3e75b5ab85ca7eeb1e5cba33b5f1d2d0db (patch)
treef7d0df4ce929a002c159bec79b9bfdcd12d9110a /block
parent4492f21263186a84237f3167aed7b0cb455869c5 (diff)
downloadlinux-6fb80b3e75b5ab85ca7eeb1e5cba33b5f1d2d0db.tar.xz
block: sed-opal: handle empty atoms when parsing response
[ Upstream commit 5429c8de56f6b2bd8f537df3a1e04e67b9c04282 ] The SED Opal response parsing function response_parse() does not handle the case of an empty atom in the response. This causes the entry count to be too high and the response fails to be parsed. Recognizing, but ignoring, empty atoms allows response handling to succeed. Signed-off-by: Greg Joyce <gjoyce@linux.ibm.com> Link: https://lore.kernel.org/r/20240216210417.3526064-2-gjoyce@linux.ibm.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'block')
-rw-r--r--block/opal_proto.h1
-rw-r--r--block/sed-opal.c6
2 files changed, 6 insertions, 1 deletions
diff --git a/block/opal_proto.h b/block/opal_proto.h
index 7152aa1f1a49..7f306b08a0fe 100644
--- a/block/opal_proto.h
+++ b/block/opal_proto.h
@@ -71,6 +71,7 @@ enum opal_response_token {
#define SHORT_ATOM_BYTE 0xBF
#define MEDIUM_ATOM_BYTE 0xDF
#define LONG_ATOM_BYTE 0xE3
+#define EMPTY_ATOM_BYTE 0xFF
#define OPAL_INVAL_PARAM 12
#define OPAL_MANUFACTURED_INACTIVE 0x08
diff --git a/block/sed-opal.c b/block/sed-opal.c
index 9bdb833e5817..25e4ce452c1d 100644
--- a/block/sed-opal.c
+++ b/block/sed-opal.c
@@ -935,16 +935,20 @@ static int response_parse(const u8 *buf, size_t length,
token_length = response_parse_medium(iter, pos);
else if (pos[0] <= LONG_ATOM_BYTE) /* long atom */
token_length = response_parse_long(iter, pos);
+ else if (pos[0] == EMPTY_ATOM_BYTE) /* empty atom */
+ token_length = 1;
else /* TOKEN */
token_length = response_parse_token(iter, pos);
if (token_length < 0)
return token_length;
+ if (pos[0] != EMPTY_ATOM_BYTE)
+ num_entries++;
+
pos += token_length;
total -= token_length;
iter++;
- num_entries++;
}
resp->num = num_entries;