Prasad J Pandit
926cde5f3e
scsi: esp: make cmdbuf big enough for maximum CDB size ...
While doing DMA read into ESP command buffer 's->cmdbuf', it could
write past the 's->cmdbuf' area, if it was transferring more than 16
bytes. Increase the command buffer size to 32, which is maximum when
's->do_cmd' is set, and add a check on 'len' to avoid OOB access.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2016-06-16 18:39:05 +02:00
2016-06-07 18:19:24 +03:00
2016-06-14 16:01:03 +01:00
2016-03-11 14:55:15 +02:00
2016-06-06 16:59:32 +01:00
2015-10-02 16:22:02 -03:00
2016-05-29 09:11:10 +02:00
2016-06-14 16:01:03 +01:00
2016-06-14 16:01:03 +01:00
2015-12-17 13:37:13 +00:00
2016-06-14 15:59:15 +01:00
2016-06-14 16:17:08 -03:00
2016-02-17 09:59:30 +11:00
2016-03-16 17:42:18 +00:00
2016-05-18 15:04:27 +03:00
2016-06-07 15:36:54 +03:00
2016-05-19 16:42:30 +02:00
2016-05-19 16:42:27 +02:00
2016-06-07 15:39:28 +03:00
2016-05-19 16:42:27 +02:00
2016-06-14 15:59:15 +01:00
2016-06-02 10:42:46 +08:00
2016-04-07 19:57:33 +03:00
2016-06-02 10:42:26 +08:00
2016-06-07 10:17:45 +10:00
2016-06-14 13:20:01 +10:00
2016-06-14 13:34:50 +02:00
2016-06-16 18:39:05 +02:00
2016-05-19 16:42:29 +02:00
2016-05-19 16:42:27 +02:00
2016-05-18 15:04:27 +03:00
2015-03-02 13:20:43 +00:00
2016-05-12 13:22:29 +01:00
2016-03-22 22:20:16 +01:00
2016-05-26 11:12:08 -06:00
2016-06-07 15:59:28 +01:00
2015-06-11 17:45:49 +02:00
2016-06-14 15:37:43 +01:00
2016-05-20 14:28:54 -03:00
2015-12-04 09:39:55 +03:00
2016-05-17 15:50:29 +02:00
2016-03-04 11:30:21 +00:00
2016-03-22 22:20:16 +01:00
2016-05-19 16:42:30 +02:00
2016-04-07 19:57:33 +03:00
2016-05-23 16:53:46 +02:00
2016-06-06 16:59:31 +01:00
2016-03-22 22:20:16 +01:00
2016-06-07 18:19:23 +03:00
2016-05-19 16:42:30 +02:00
2016-03-22 22:20:16 +01:00
926cde5f3e