iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7cafbf1bd5
linux/drivers/scsi/isci
History
Maciej Patelczyk 7cafbf1bd5 isci: possible buffer overflow in isci_parse_oem_parameters fixed 
scu_index is a parameter of isci_parse_eom_parameters and is an index
in controller table. There is a check: scu_index > SCI_MAX_CONTROLLERS
which is insufficient and should be: scu_index >= SCI_MAX_CONTROLLERS.
scu_index is used as an index in the table which size is
SCI_MAX_CONTROLLERS.

Signed-off-by: Maciej Patelczyk <maciej.patelczyk@intel.com>
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
2011-07-03 04:04:51 -07:00
..
firmware isci: Added support for C0 to SCU Driver 2011-07-03 04:04:50 -07:00
host.c isci: kill isci_remote_device_change_state() 2011-07-03 04:04:51 -07:00
host.h isci: kill device_sequence 2011-07-03 04:04:51 -07:00
init.c isci: Added support for C0 to SCU Driver 2011-07-03 04:04:50 -07:00
isci.h isci: cleanup/optimize queue increment macros 2011-07-03 04:04:51 -07:00
Makefile isci: additional state machine cleanup 2011-07-03 04:04:50 -07:00
phy.c isci: Disable link layer hang detection 2011-07-03 04:04:50 -07:00
phy.h isci: additional state machine cleanup 2011-07-03 04:04:50 -07:00
port_config.c isci: state machine cleanup 2011-07-03 04:04:50 -07:00
port.c isci: atomic device lookup and reference counting 2011-07-03 04:04:51 -07:00
port.h isci: filter broadcast change notifications during SMP phy resets 2011-07-03 04:04:50 -07:00
probe_roms.c isci: possible buffer overflow in isci_parse_oem_parameters fixed 2011-07-03 04:04:51 -07:00
probe_roms.h isci: Retrieve the EFI variable for OEM parameter 2011-07-03 04:04:50 -07:00
registers.h isci: uplevel register hardware data structures and unsolicited frame handling 2011-07-03 04:04:47 -07:00
remote_device.c isci: kill device_sequence 2011-07-03 04:04:51 -07:00
remote_device.h isci: kill device_sequence 2011-07-03 04:04:51 -07:00
remote_node_context.c isci: Explicitly decode remote node ready and suspended states 2011-07-03 04:04:50 -07:00
remote_node_context.h isci: additional state machine cleanup 2011-07-03 04:04:50 -07:00
remote_node_table.c isci: uplevel request infrastructure 2011-07-03 04:04:47 -07:00
remote_node_table.h isci: unify constants 2011-07-03 04:04:47 -07:00
request.c isci: fix support for arbitrarily large smp requests 2011-07-03 04:04:51 -07:00
request.h isci: fix support for arbitrarily large smp requests 2011-07-03 04:04:51 -07:00
sas.h isci: fix support for arbitrarily large smp requests 2011-07-03 04:04:51 -07:00
sata.c isci: atomic device lookup and reference counting 2011-07-03 04:04:51 -07:00
sata.h isci: Convert ATA defines to Linux native defines 2011-07-03 04:04:46 -07:00
scu_completion_codes.h isci: uplevel register hardware data structures and unsolicited frame handling 2011-07-03 04:04:47 -07:00
scu_event_codes.h isci: uplevel register hardware data structures and unsolicited frame handling 2011-07-03 04:04:47 -07:00
scu_remote_node_context.h isci: move remote_device handling out of the core 2011-07-03 04:00:38 -07:00
scu_task_context.h isci: uplevel register hardware data structures and unsolicited frame handling 2011-07-03 04:04:47 -07:00
scu_unsolicited_frame.h isci: uplevel register hardware data structures and unsolicited frame handling 2011-07-03 04:04:47 -07:00
task.c isci: fix isci_task_execute_tmf completion 2011-07-03 04:04:51 -07:00
task.h isci: atomic device lookup and reference counting 2011-07-03 04:04:51 -07:00
unsolicited_frame_control.c isci: cleanup/optimize queue increment macros 2011-07-03 04:04:51 -07:00
unsolicited_frame_control.h isci: remove 'min memory' infrastructure 2011-07-03 04:04:50 -07:00