diff options
| author | Asias He <asias@redhat.com> | 2013-09-13 14:56:55 +0800 |
|---|---|---|
| committer | Michael Roth <mdroth@linux.vnet.ibm.com> | 2013-10-04 10:18:56 -0500 |
| commit | fdcbe7d587a64dec0db0d3c9a3b230c39efbfeef (patch) | |
| tree | 5f4cf8b82bb1407a4cb628babae299eec882f56d /crypto | |
| parent | 1b5f7709411a412ec8ce21004a47f51ab6c3f3ad (diff) | |
scsi: Allocate SCSITargetReq r->buf dynamically
BZ: https://bugzilla.redhat.com/show_bug.cgi?id=1007330
Brew: https://brewweb.devel.redhat.com/taskinfo?taskID=6282465
This is the backport of the following commit. The patch is not
sent public since it is a embargoed bug.
r->buf is hardcoded to 2056 which is (256 + 1) * 8, allowing 256 luns at
most. If more than 256 luns are specified by user, we have buffer
overflow in scsi_target_emulate_report_luns.
To fix, we allocate the buffer dynamically.
Signed-off-by: Asias He <asias@redhat.com>
Signed-off-by: Asias He <asias@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
*s/&r->buf/r->buf/ due to type change
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions