Searched hist:d3cdc491 (Results 1 – 1 of 1) sorted by relevance
| /qemu/hw/scsi/ |
| H A D | esp.c | diff d3cdc491 Tue May 31 17:53:27 GMT 2016 Prasad J Pandit <pjp@fedoraproject.org> scsi: esp: check buffer length before reading scsi command
The 53C9X Fast SCSI Controller(FSC) comes with an internal 16-byte
FIFO buffer. It is used to handle command and data transfer.
Routine get_cmd() in non-DMA mode, uses 'ti_size' to read scsi
command into a buffer. Add check to validate command length against
buffer size to avoid any overrun.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-Id: <1464717207-7549-1-git-send-email-ppandit@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
|