qemu/include
Prasad J Pandit 926cde5f3e scsi: esp: make cmdbuf big enough for maximum CDB size
While doing DMA read into ESP command buffer 's->cmdbuf', it could
write past the 's->cmdbuf' area, if it was transferring more than 16
bytes.  Increase the command buffer size to 32, which is maximum when
's->do_cmd' is set, and add a check on 'len' to avoid OOB access.

Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2016-06-16 18:39:05 +02:00
..
block nbd: Avoid magic number for NBD max name size 2016-06-16 18:39:05 +02:00
crypto crypto: aes: always rename internal symbols 2016-06-13 12:41:17 +01:00
disas qemu-common: push cpu.h inclusion out of qemu-common.h 2016-05-19 16:42:29 +02:00
exec tb hash: track translated blocks with qht 2016-06-11 17:11:16 -07:00
fpu include: Clean up includes 2016-02-23 12:43:05 +00:00
hw scsi: esp: make cmdbuf big enough for maximum CDB size 2016-06-16 18:39:05 +02:00
io Fix some typos found by codespell 2016-05-18 15:04:27 +03:00
libdecnumber include: Clean up includes 2016-02-23 12:43:05 +00:00
migration migration: rename functions to starting migrations 2016-06-16 09:51:37 +05:30
monitor Use scripts/clean-includes to drop redundant qemu/typedefs.h 2016-03-22 22:20:16 +01:00
net net_pkt: Extend packet abstraction as required by e1000e functionality 2016-06-02 10:42:28 +08:00
qapi migration: add reporting of errors for outgoing migration 2016-05-26 11:31:30 +05:30
qemu clean-includes: run it once more 2016-06-16 18:39:03 +02:00
qom all: Remove unnecessary glib.h includes 2016-06-07 18:19:24 +03:00
standard-headers linux-headers: update 2016-06-14 13:34:50 +02:00
sysemu os-posix: include sys/mman.h 2016-06-16 18:39:03 +02:00
ui spice: Initialization stubs on qemu-spice.h 2016-05-20 14:28:53 -03:00
elf.h Add PowerPC AT_HWCAP2 definitions 2016-06-14 10:41:38 +10:00
glib-compat.h glib: add compatibility interface for g_hash_table_add() 2015-10-30 09:01:03 +01:00
qemu-common.h qemu-common.h: Drop WORDS_ALIGNED define 2016-06-07 18:19:24 +03:00
qemu-io.h qemu-io: Use BlockBackend 2015-02-16 15:07:19 +00:00
trace-tcg.h trace: [tcg] Generate TCG tracing routines 2014-08-12 14:26:12 +01:00
trace.h trace: [tcg] Include event definitions in "trace.h" 2014-08-12 14:26:12 +01:00