| commit | 1439b9c11002348eb80fcd3c90f07bf0f4f088dc | |
| author | Fam Zheng <famz@redhat.com> | |
| Fri, 29 Jun 2018 06:03:27 +0000 (29 14:03 +0800) | ||
| committer | Kevin Wolf <kwolf@redhat.com> | |
| Fri, 29 Jun 2018 12:20:56 +0000 (29 14:20 +0200) | ||
| tree | 0cbfeb4b9c895027927b85690eefd4cee4056121 | treesnapshot (tar.gz zip) |
| parent | e06f4639d8a93703eecc3aad06c8a3e9b2ef4968 | commitdiff |
iscsi: Don't blindly use designator length in response for memcpy
Per SCSI definition the designator_length we receive from INQUIRY is 8,
12 or at most 16, but we should be careful because the remote iscsi
target may misbehave, otherwise we could have a buffer overflow.
Reported-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Fam Zheng <famz@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Per SCSI definition the designator_length we receive from INQUIRY is 8,
12 or at most 16, but we should be careful because the remote iscsi
target may misbehave, otherwise we could have a buffer overflow.
Reported-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Fam Zheng <famz@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
| block/iscsi.c | diffblobblamehistory |