| commit | 7cafbf1bd56be44038148bb8f733ea6e6a6a2d53 | |
| author | Maciej Patelczyk <maciej.patelczyk@intel.com> | |
| Tue, 21 Jun 2011 22:03:13 +0000 (21 22:03 +0000) | ||
| committer | Dan Williams <dan.j.williams@intel.com> | |
| Sun, 3 Jul 2011 11:04:51 +0000 (3 04:04 -0700) | ||
| tree | caf063a0640a33d37b198c3dd5c71ce04247a493 | treesnapshot (tar.gz zip) |
| parent | 086a0dabc5bf154e13604a6d71e2d051207f9718 | commitdiff |
isci: possible buffer overflow in isci_parse_oem_parameters fixed
scu_index is a parameter of isci_parse_eom_parameters and is an index
in controller table. There is a check: scu_index > SCI_MAX_CONTROLLERS
which is insufficient and should be: scu_index >= SCI_MAX_CONTROLLERS.
scu_index is used as an index in the table which size is
SCI_MAX_CONTROLLERS.
Signed-off-by: Maciej Patelczyk <maciej.patelczyk@intel.com>
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
scu_index is a parameter of isci_parse_eom_parameters and is an index
in controller table. There is a check: scu_index > SCI_MAX_CONTROLLERS
which is insufficient and should be: scu_index >= SCI_MAX_CONTROLLERS.
scu_index is used as an index in the table which size is
SCI_MAX_CONTROLLERS.
Signed-off-by: Maciej Patelczyk <maciej.patelczyk@intel.com>
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
| drivers/scsi/isci/probe_roms.c | diffblobblamehistory |