]> git.baikalelectronics.ru Git - kernel.git/commit
fix: lpfc_send_rscn_event sends bigger buffer size
authorAles Novak <alnovak@suse.cz>
Mon, 31 Aug 2015 20:48:16 +0000 (16:48 -0400)
committerJames Bottomley <JBottomley@Odin.com>
Tue, 27 Oct 2015 01:08:51 +0000 (10:08 +0900)
commit358daea791949a9f60a2b62f9780085efe2e2200
tree1219d04b1e8030cd44ebac3aa6de9b7e6505e59a
parent4b4267c52b4591ff835749f23cb58b3a4d7e6589
fix: lpfc_send_rscn_event sends bigger buffer size

lpfc_send_rscn_event() allocates data for sizeof(struct
lpfc_rscn_event_header) + payload_len, but claims that the data has size
of sizeof(struct lpfc_els_event_header) + payload_len. That leads to
buffer overruns.

Signed-off-by: Ales Novak <alnovak@suse.cz>
Signed-off-by: James Smart <james.smart@avagotech.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sebastian Herbszt <herbszt@gmx.de>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
drivers/scsi/lpfc/lpfc_els.c