Mark Cave-Ayland 3f26c97577 esp: ensure that async_len is reset to 0 during esp_hard_reset() ...

If a reset command is sent after data has been transferred into the SCSI buffer
ensure that async_len is reset to 0. Otherwise a subsequent TI command assumes
the SCSI buffer contains data to be transferred to the device causing it to
dereference the stale async_buf pointer.

Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/724
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-Id: <20211118100327.29061-2-mark.cave-ayland@ilande.co.uk>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

2021-11-19 10:14:30 +01:00

..

emulation.c

scsi-generic: avoid invalid access to struct when emulating block limits

2018-11-06 21:35:06 +01:00

esp-pci.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

esp.c

esp: ensure that async_len is reset to 0 during esp_hard_reset()

2021-11-19 10:14:30 +01:00

Kconfig

hw/nvram/Kconfig: Add an entry for the NMC93xx EEPROM

2020-01-07 12:08:39 +01:00

lsi53c895a.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

megasas.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

meson.build

meson: convert hw/scsi

2020-08-21 06:30:28 -04:00

mfi.h

…

mpi.h

…

mptconfig.c

nomaintainer: Fix Lesser GPL version number

2020-11-15 17:04:40 +01:00

mptendian.c

nomaintainer: Fix Lesser GPL version number

2020-11-15 17:04:40 +01:00

mptsas.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

mptsas.h

mptsas: Remove unused MPTSASState 'pending' field (CVE-2021-3392)

2021-04-19 15:48:12 +01:00

scsi-bus.c

qbus: Rename qbus_create_inplace() to qbus_init()

2021-09-30 13:42:10 +01:00

scsi-disk.c

hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands

2021-11-08 08:55:29 +01:00

scsi-generic.c

block: introduce max_hw_iov for use in scsi-generic

2021-10-06 10:25:55 +02:00

spapr_vscsi.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

srp.h

…

trace-events

esp: store lun coming from the MESSAGE OUT phase

2021-06-15 17:17:09 +02:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00

vhost-scsi-common.c

vhost-scsi: support inflight io track

2020-09-30 19:09:20 +02:00

vhost-scsi.c

vhost-scsi: Plug memory leak on migrate_add_blocker() failure

2021-08-26 17:15:28 +02:00

vhost-user-scsi.c

vhost: Add Error parameter to vhost_dev_init()

2021-06-30 13:15:44 +02:00

viosrp.h

hw/scsi/spapr_vscsi: Do not mix SRP IU size with DMA buffer size

2020-03-17 15:08:50 +11:00

virtio-scsi-dataplane.c

virtio: Clarify MR transaction optimization

2021-07-02 11:13:39 -04:00

virtio-scsi.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

vmw_pvscsi.c

scsi: Replace scsi_bus_new() with scsi_bus_init(), scsi_bus_init_named()

2021-09-30 13:42:10 +01:00

vmw_pvscsi.h

…