On Tue, Dec 29, 2020 at 11:40:39PM -0800, Song Liu wrote:
From: Kevin Vigor kvigor@gmail.com
In __make_request() a new r10bio is allocated and passed to raid10_read_request(). The read_slot member of the bio is not initialized, and the raid10_read_request() uses it to index an array. This leads to occasional panics.
Fix by initializing the field to invalid value and checking for valid value in raid10_read_request().
Cc: stable@vger.kernel.org # v4.14+ Signed-off-by: Kevin Vigor kvigor@gmail.com Signed-off-by: Song Liu songliubraving@fb.com (cherry picked from commit 93decc563637c4288380912eac0eb42fb246cc04)
drivers/md/raid10.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)
Now queued up, thanks.
greg k-h