| commit | 670e56d3ed2918b3861d9216f2c0540d9e9ae0d5 | |
| author | Li Qiang <liqiang6-s@360.cn> | |
| Mon, 12 Sep 2016 12:44:11 +0000 (12 18:14 +0530) | ||
| committer | Paolo Bonzini <pbonzini@redhat.com> | |
| Wed, 14 Sep 2016 10:25:13 +0000 (14 12:25 +0200) | ||
| tree | 9c2e1a74b181ee1222e66ef887133d853e3bb19c | treesnapshot (tar.gz zip) |
| parent | 2a2d69f490c1b1dc6b6d2aef385ee7b654497a77 | commitdiff |
scsi: mptsas: use g_new0 to allocate MPTSASRequest object
When processing IO request in mptsas, it uses g_new to allocate
a 'req' object. If an error occurs before 'req->sreq' is
allocated, It could lead to an OOB write in mptsas_free_request
function. Use g_new0 to avoid it.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-Id: <1473684251-17476-1-git-send-email-ppandit@redhat.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
When processing IO request in mptsas, it uses g_new to allocate
a 'req' object. If an error occurs before 'req->sreq' is
allocated, It could lead to an OOB write in mptsas_free_request
function. Use g_new0 to avoid it.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-Id: <1473684251-17476-1-git-send-email-ppandit@redhat.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
| hw/scsi/mptsas.c | diffblobblamehistory |