Ything-RepoMirrors/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-01-24 23:16:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

scsi: core: Fix error handler encryption support

Browse Source 
Some low-level drivers (LLD) access block layer crypto fields, such as
rq->crypt_keyslot and rq->crypt_ctx within `struct request`, to
configure hardware for inline encryption.  However, SCSI Error Handling
(EH) commands (e.g., TEST UNIT READY, START STOP UNIT) should not
involve any encryption setup.

To prevent drivers from erroneously applying crypto settings during EH,
this patch saves the original values of rq->crypt_keyslot and
rq->crypt_ctx before an EH command is prepared via scsi_eh_prep_cmnd().
These fields in the 'struct request' are then set to NULL.  The original
values are restored in scsi_eh_restore_cmnd() after the EH command
completes.

This ensures that the block layer crypto context does not leak into EH
command execution.

Signed-off-by: Brian Kao <powenkao@google.com>
Link: https://patch.msgid.link/20251218031726.2642834-1-powenkao@google.com
Cc: stable@vger.kernel.org
Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
This commit is contained in:
Brian Kao
2025-12-18 03:17:23 +00:00
committed by Martin K. Petersen
parent 1523d50aba
commit 9a49157dee
2 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
drivers/scsi/scsi_error.c
View File

@@ -1063,6 +1063,9 @@ void scsi_eh_prep_cmnd(struct scsi_cmnd *scmd, struct scsi_eh_save *ses,
unsigned char *cmnd, int cmnd_size, unsigned sense_bytes)
{
struct scsi_device *sdev = scmd->device;
#ifdef CONFIG_BLK_INLINE_ENCRYPTION
struct request *rq = scsi_cmd_to_rq(scmd);
#endif
/*
* We need saved copies of a number of fields - this is because
@@ -1114,6 +1117,18 @@ void scsi_eh_prep_cmnd(struct scsi_cmnd *scmd, struct scsi_eh_save *ses,
scmd->cmnd[1] = (scmd->cmnd[1] & 0x1f) |
(sdev->lun << 5 & 0xe0);
/*
* Encryption must be disabled for the commands submitted by the error handler.
* Hence, clear the encryption context information.
*/
#ifdef CONFIG_BLK_INLINE_ENCRYPTION
ses->rq_crypt_keyslot = rq->crypt_keyslot;
ses->rq_crypt_ctx = rq->crypt_ctx;
rq->crypt_keyslot = NULL;
rq->crypt_ctx = NULL;
#endif
/*
* Zero the sense buffer. The scsi spec mandates that any
* untransferred sense data should be interpreted as being zero.
@@ -1131,6 +1146,10 @@ EXPORT_SYMBOL(scsi_eh_prep_cmnd);
*/
void scsi_eh_restore_cmnd(struct scsi_cmnd* scmd, struct scsi_eh_save *ses)
{
#ifdef CONFIG_BLK_INLINE_ENCRYPTION
struct request *rq = scsi_cmd_to_rq(scmd);
#endif
/*
* Restore original data
*/
@@ -1143,6 +1162,11 @@ void scsi_eh_restore_cmnd(struct scsi_cmnd* scmd, struct scsi_eh_save *ses)
scmd->underflow = ses->underflow;
scmd->prot_op = ses->prot_op;
scmd->eh_eflags = ses->eh_eflags;
#ifdef CONFIG_BLK_INLINE_ENCRYPTION
rq->crypt_keyslot = ses->rq_crypt_keyslot;
rq->crypt_ctx = ses->rq_crypt_ctx;
#endif
}
EXPORT_SYMBOL(scsi_eh_restore_cmnd);

6
include/scsi/scsi_eh.h
View File

@@ -41,6 +41,12 @@ struct scsi_eh_save {
unsigned char cmnd[32];
struct scsi_data_buffer sdb;
struct scatterlist sense_sgl;
/* struct request fields */
#ifdef CONFIG_BLK_INLINE_ENCRYPTION
struct bio_crypt_ctx *rq_crypt_ctx;
struct blk_crypto_keyslot *rq_crypt_keyslot;
#endif
};
extern void scsi_eh_prep_cmnd(struct scsi_cmnd *scmd,