github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-06-09 07:03:37 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
3dbbae24b3
linux/drivers
History
Nicholas Bellinger f2c1c3233a target: Fix REPORT TARGET PORT GROUPS handling with small allocation length 
commit 6b20fa9aaf upstream.

This patch fixes a bug with the handling of REPORT TARGET PORT GROUPS
containing a smaller allocation length than the payload requires causing
memory writes beyond the end of the buffer.  This patch checks for the
minimum 4 byte length for the response payload length, and also checks
upon each loop of T10_ALUA(su_dev)->tg_pt_gps_list to ensure the Target
port group and Target port descriptor list is able to fit into the
remaining allocation length.

If the response payload exceeds the allocation length length, then rd_len
is still increments to indicate to the initiator that the payload has
been truncated.

Reported-by: Roland Dreier <roland@purestorage.com>
Signed-off-by: Nicholas Bellinger <nab@risingtidesystems.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2011-11-11 09:35:26 -08:00
..
accessibility
acpi acpica: ACPI_MAX_SLEEP should be 2 sec, not 20 2011-10-03 11:40:25 -07:00
amba
ata ahci: Enable SB600 64bit DMA on Asus M3A 2011-10-16 14:14:54 -07:00
atm
auxdisplay
base firmware loader: allow builtin firmware load even if usermodehelper is disabled 2011-10-03 11:41:07 -07:00
bcma drivers/bcma/host_pci.c needs slab.h 2011-05-26 17:12:32 -07:00
block floppy: use del_timer_sync() in init cleanup 2011-10-03 11:40:36 -07:00
bluetooth Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6 into for-davem 2011-06-17 12:40:36 -04:00
cdrom block: fix mismerge of the DISK_EVENT_MEDIA_CHANGE removal 2011-06-02 05:29:19 +09:00
char TPM: Zero buffer after copying to userspace 2011-10-03 11:40:58 -07:00
clk
clocksource Revert "clocksource: sh_cmt: Runtime PM support" 2011-05-31 15:26:42 +09:00
connector Connector: Correctly set the error code in case of success when dispatching receive callbacks 2011-06-07 12:02:00 -07:00
cpufreq drivers/cpufreq/pcc-cpufreq.c: avoid NULL pointer dereference 2011-10-03 11:40:31 -07:00
cpuidle Merge branch 'idle-release' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux-idle-2.6 2011-05-29 11:18:09 -07:00
crypto crypto: caam - fix operator precedence in shared descriptor allocation 2011-06-30 07:43:27 +08:00
dca
dio
dma dmaengine: shdma: SH_DMAC_MAX_CHANNELS message fix 2011-06-14 15:03:07 +09:00
edac i7core_edac: fixed typo in error count calculation 2011-08-29 13:29:06 -07:00
eisa
firewire firewire: sbp2: fix panic after rmmod with slow targets 2011-10-25 07:10:16 +02:00
firmware drivers/firmware/sigma.c needs MODULE_LICENSE 2011-08-04 21:58:38 -07:00
gpio gpio: wm831x: add a missing break in wm831x_gpio_dbg_show 2011-07-15 14:03:30 -06:00
gpu drm/radeon/kms: Fix I2C mask definitions 2011-11-11 09:35:22 -08:00
hid HID: magicmouse: ignore 'ivalid report id' while switching modes, v2 2011-10-25 07:10:15 +02:00
hwmon hwmon: (w83627ehf) Fix negative 8-bit temperature values 2011-10-25 07:10:17 +02:00
hwspinlock
i2c Merge branch 'for-30-rc5/all-i2c' of git://git.fluff.org/bjdooks/linux 2011-07-07 16:29:29 -07:00
ide ide-disk: Fix request requeuing 2011-10-16 14:14:51 -07:00
idle
ieee802154
infiniband cxgb3i: convert cdev->l2opt to use rcu to prevent NULL dereference 2011-10-03 11:41:08 -07:00
input input: pmic8xxx-pwrkey: Do not use mfd_get_data() 2011-07-05 10:38:43 +02:00
isdn net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared 2011-08-15 18:31:38 -07:00
leds drivers/leds/ledtrig-timer.c: fix broken sysfs delay handling 2011-10-03 11:40:31 -07:00
lguest
macintosh
mca
md dm table: avoid crash if integrity profile changes 2011-10-16 14:14:53 -07:00
media uvcvideo: Fix crash when linking entities 2011-10-25 07:10:15 +02:00
memstick
message
mfd mfd: Make omap-usb-host TLL mode work again 2011-10-03 11:40:27 -07:00
misc lis3: fix regression of HP DriveGuard with 8bit chip 2011-10-16 14:14:51 -07:00
mmc mmc: core: ext_csd.raw_* used in comparison but never set 2011-11-11 09:35:23 -08:00
mtd powerpc/85xx: fix NAND_CMD_READID read bytes number 2011-06-22 06:08:48 -05:00
net e1000e: workaround for packet drop on 82579 at 100Mbps 2011-10-16 14:14:55 -07:00
nfc
nubus
of
oprofile oprofile: Fix locking dependency in sync_start() 2011-05-31 16:33:34 +02:00
parisc
parport Merge branch 'trivial' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild-2.6 2011-05-26 13:19:00 -07:00
pci PCI quirk: mmc: Always check for lower base frequency quirk for Ricoh 1180:e823 2011-11-11 09:35:23 -08:00
pcmcia pcmcia: pxa2xx/vpac270: free gpios on exist rather than requesting 2011-07-11 14:26:34 +08:00
platform Platform: fix samsung-laptop DMI identification for N150/N210/220/N230 2011-10-25 07:10:14 +02:00
pnp
power Merge git://git.infradead.org/battery-2.6 2011-05-27 10:12:35 -07:00
pps
ps3
ptp ptp: Fix some locking bugs in ptp_read() 2011-06-01 19:29:10 -07:00
rapidio rapidio: fix use of non-compatible registers 2011-10-03 11:39:46 -07:00
regulator regulator: tps65910: Add missing breaks in switch/case 2011-10-03 11:40:01 -07:00
rtc rtc: Fix RTC PIE frequency limit 2011-10-03 11:40:08 -07:00
s390 qdio: clear shared DSCI before scheduling the queue handler 2011-10-03 11:40:44 -07:00
sbus
scsi isci: fix missed unlock in apc_agent_timeout() 2011-11-11 09:35:25 -08:00
sfi
sh drivers: sh: resume enabled clocks fix 2011-06-14 15:15:25 +09:00
sn
spi spi/s3c64xx: Bug fix for SPI with different FIFO level 2011-07-06 15:03:08 +09:00
ssb ssb: fix init regression of hostmode PCI core 2011-07-07 13:06:08 -04:00
staging Staging: hv: Add support for >2 TB LUN in storage driver. 2011-11-11 09:35:14 -08:00
target target: Fix REPORT TARGET PORT GROUPS handling with small allocation length 2011-11-11 09:35:26 -08:00
tc
telephony
thermal
tty serial-core: power up uart port early before we do set_termios when resuming 2011-11-11 09:35:15 -08:00
uio
usb xHCI: AMD isoc link TRB chain bit quirk 2011-11-11 09:35:18 -08:00
uwb
vhost vhost: support event index 2011-05-30 11:14:15 +09:30
video savagedb: Fix typo causing regression in savage4 series video chip detection 2011-10-03 11:39:57 -07:00
virtio virtio: add api for delayed callbacks 2011-05-30 11:14:16 +09:30
vlynq
w1 w1: ds1wm: add a reset recovery parameter 2011-07-08 21:14:44 -07:00
watchdog watchdog: shwdt: fix usage of mod_timer 2011-08-04 21:58:42 -07:00
xen Merge branch 'stable/bug.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen 2011-06-20 09:01:33 -07:00
zorro zorro: Defer device_register() until all devices have been identified 2011-10-03 11:40:57 -07:00
Kconfig
Makefile Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/async_tx 2011-05-28 12:35:15 -07:00