Commit 4ee86bab authored by Hannes Reinecke's avatar Hannes Reinecke Committed by Jens Axboe

blk-mq: add bounds check on tag-to-rq conversion

We need to check for a valid index before accessing the array
element to avoid accessing invalid memory regions.
Reviewed-by: default avatarChristoph Hellwig <>
Reviewed-by: default avatarJeff Moyer <>

Modified by Jens to drop the unlikely(), and make the fall through
path be having a valid tag.
Signed-off-by: default avatarJens Axboe <>
parent 2b885517
......@@ -544,7 +544,10 @@ EXPORT_SYMBOL(blk_mq_abort_requeue_list);
struct request *blk_mq_tag_to_rq(struct blk_mq_tags *tags, unsigned int tag)
return tags->rqs[tag];
if (tag < tags->nr_tags)
return tags->rqs[tag];
return NULL;
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment