Prasad J Pandit 926cde5f3e scsi: esp: make cmdbuf big enough for maximum CDB size ...

While doing DMA read into ESP command buffer 's->cmdbuf', it could
write past the 's->cmdbuf' area, if it was transferring more than 16
bytes.  Increase the command buffer size to 32, which is maximum when
's->do_cmd' is set, and add a check on 'len' to avoid OOB access.

Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

2016-06-16 18:39:05 +02:00

..

block

nbd: Avoid magic number for NBD max name size

2016-06-16 18:39:05 +02:00

crypto

crypto: aes: always rename internal symbols

2016-06-13 12:41:17 +01:00

disas

qemu-common: push cpu.h inclusion out of qemu-common.h

2016-05-19 16:42:29 +02:00

exec

tb hash: track translated blocks with qht

2016-06-11 17:11:16 -07:00

fpu

include: Clean up includes

2016-02-23 12:43:05 +00:00

hw

scsi: esp: make cmdbuf big enough for maximum CDB size

2016-06-16 18:39:05 +02:00

io

Fix some typos found by codespell

2016-05-18 15:04:27 +03:00

libdecnumber

include: Clean up includes

2016-02-23 12:43:05 +00:00

migration

migration: rename functions to starting migrations

2016-06-16 09:51:37 +05:30

monitor

Use scripts/clean-includes to drop redundant qemu/typedefs.h

2016-03-22 22:20:16 +01:00

net

net_pkt: Extend packet abstraction as required by e1000e functionality

2016-06-02 10:42:28 +08:00

qapi

migration: add reporting of errors for outgoing migration

2016-05-26 11:31:30 +05:30

qemu

clean-includes: run it once more

2016-06-16 18:39:03 +02:00

qom

all: Remove unnecessary glib.h includes

2016-06-07 18:19:24 +03:00

standard-headers

linux-headers: update

2016-06-14 13:34:50 +02:00

sysemu

os-posix: include sys/mman.h

2016-06-16 18:39:03 +02:00

ui

spice: Initialization stubs on qemu-spice.h

2016-05-20 14:28:53 -03:00

elf.h

Add PowerPC AT_HWCAP2 definitions

2016-06-14 10:41:38 +10:00

glib-compat.h

glib: add compatibility interface for g_hash_table_add()

2015-10-30 09:01:03 +01:00

qemu-common.h

qemu-common.h: Drop WORDS_ALIGNED define

2016-06-07 18:19:24 +03:00

qemu-io.h

…

trace-tcg.h

…

trace.h

…