Fam Zheng 1439b9c110 iscsi: Don't blindly use designator length in response for memcpy ...

Per SCSI definition the designator_length we receive from INQUIRY is 8,
12 or at most 16, but we should be careful because the remote iscsi
target may misbehave, otherwise we could have a buffer overflow.

Reported-by: Max Reitz <mreitz@redhat.com>
Signed-off-by: Fam Zheng <famz@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>

2018-06-29 14:20:56 +02:00

..

accounting.c

…

backup.c

hbitmap: Add @advance param to hbitmap_iter_next()

2018-06-18 17:04:55 +02:00

blkdebug.c

…

blkreplay.c

…

blkverify.c

…

block-backend.c

block: fix QEMU crash with scsi-hd and drive_del

2018-06-18 15:03:25 +02:00

bochs.c

…

cloop.c

…

commit.c

job: Add error message for failing jobs

2018-05-30 13:31:01 +02:00

copy-on-read.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

create.c

block/create: Mark blockdev-create stable

2018-05-30 13:31:18 +02:00

crypto.c

block/crypto: Simplify block_crypto_{open,create}_opts_init()

2018-06-29 14:20:56 +02:00

crypto.h

block/crypto: Simplify block_crypto_{open,create}_opts_init()

2018-06-29 14:20:56 +02:00

curl.c

…

dirty-bitmap.c

block/dirty-bitmap: Add bdrv_dirty_iter_next_area

2018-06-18 17:04:57 +02:00

dmg-bz2.c

…

dmg.c

…

dmg.h

…

file-posix.c

file-posix: Implement co versions of discard/flush

2018-06-29 14:20:56 +02:00

file-win32.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

gluster.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

io.c

block: Move request tracking to children in copy offloading

2018-06-29 14:20:56 +02:00

iscsi-opts.c

…

iscsi.c

iscsi: Don't blindly use designator length in response for memcpy

2018-06-29 14:20:56 +02:00

linux-aio.c

linux-aio: properly bubble up errors from initialization

2018-06-27 13:06:34 +01:00

Makefile.objs

…

mirror.c

block/mirror: Add copy mode QAPI interface

2018-06-18 17:05:16 +02:00

nbd-client.c

…

nbd-client.h

…

nbd.c

block: Factor out qobject_input_visitor_new_flat_confused()

2018-06-15 14:49:44 +02:00

nfs.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

null.c

…

nvme.c

…

parallels.c

block: Factor out qobject_input_visitor_new_flat_confused()

2018-06-15 14:49:44 +02:00

parallels.h

…

qapi.c

…

qcow2-bitmap.c

block/qcow2-bitmap: fix free_bitmap_clusters

2018-06-11 16:18:45 +02:00

qcow2-cache.c

…

qcow2-cluster.c

qcow2: Free allocated clusters on write error

2018-06-29 14:20:56 +02:00

qcow2-refcount.c

qcow2: Repair OFLAG_COPIED when fixing leaks

2018-06-11 16:18:45 +02:00

qcow2-snapshot.c

block: use local path for local headers

2018-05-31 04:16:06 +03:00

qcow2.c

qcow2: Fix src_offset in copy offloading

2018-06-29 14:20:56 +02:00

qcow2.h

qcow2: Free allocated clusters on write error

2018-06-29 14:20:56 +02:00

qcow.c

block/crypto: Simplify block_crypto_{open,create}_opts_init()

2018-06-29 14:20:56 +02:00

qed-check.c

…

qed-cluster.c

…

qed-l2-cache.c

…

qed-table.c

…

qed.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

qed.h

…

quorum.c

block: Add block-specific QDict header

2018-06-15 14:49:44 +02:00

raw-format.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

rbd.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

replication.c

job: Move completion and cancellation to Job

2018-05-23 14:30:51 +02:00

sheepdog.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

snapshot.c

block: Add block-specific QDict header

2018-06-15 14:49:44 +02:00

ssh.c

block: Convert .bdrv_truncate callback to coroutine_fn

2018-06-29 14:20:56 +02:00

stream.c

job: Add error message for failing jobs

2018-05-30 13:31:01 +02:00

throttle-groups.c

…

throttle.c

throttle: Fix crash on reopen

2018-06-11 16:18:45 +02:00

trace-events

job: Move completion and cancellation to Job

2018-05-23 14:30:51 +02:00

vdi.c

block: Make remaining uses of qobject input visitor more robust

2018-06-15 14:49:44 +02:00

vhdx-endian.c

block: use local path for local headers

2018-05-31 04:16:06 +03:00

vhdx-log.c

block: use local path for local headers

2018-05-31 04:16:06 +03:00

vhdx.c

block: Factor out qobject_input_visitor_new_flat_confused()

2018-06-15 14:49:44 +02:00

vhdx.h

…

vmdk.c

…

vpc.c

block: Factor out qobject_input_visitor_new_flat_confused()

2018-06-15 14:49:44 +02:00

vvfat.c

block: ignore_bds_parents parameter for drain functions

2018-06-18 15:03:25 +02:00

vxhs.c

block: Add block-specific QDict header

2018-06-15 14:49:44 +02:00

win32-aio.c

…

write-threshold.c

…