diff options
| author | Arun Easi <[email protected]> | 2020-01-23 20:50:14 -0800 |
|---|---|---|
| committer | Martin K. Petersen <[email protected]> | 2020-01-30 10:31:47 -0500 |
| commit | 00fe717ee1ea3c2979db4f94b1533c57aed8dea9 (patch) | |
| tree | b94dcb5a03ab36fc2b338d0c426ea340e8b0582a /tools/perf/scripts | |
| parent | 11e673206f217ce6604b7b0269e3cfc65171c380 (diff) | |
scsi: qla2xxx: Fix unbound NVME response length
On certain cases when response length is less than 32, NVME response data
is supplied inline in IOCB. This is indicated by some combination of state
flags. There was an instance when a high, and incorrect, response length
was indicated causing driver to overrun buffers. Fix this by checking and
limiting the response payload length.
Fixes: 7401bc18d1ee3 ("scsi: qla2xxx: Add FC-NVMe command handling")
Cc: [email protected]
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Arun Easi <[email protected]>
Signed-off-by: Himanshu Madhani <[email protected]>
Reviewed-by: Ewan D. Milne <[email protected]>
Signed-off-by: Martin K. Petersen <[email protected]>
Diffstat (limited to 'tools/perf/scripts')
0 files changed, 0 insertions, 0 deletions