[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use
From: |
Philippe Mathieu-Daudé |
Subject: |
[PATCH 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use |
Date: |
Wed, 4 Mar 2020 16:33:06 +0100 |
This series fixes a dangerous zero-length array use.
Simples patches first to clean the issue in the last patch:
dissociate the buffer holding DMA requests with pointer to
SRP Information Unit packets.
Philippe Mathieu-Daudé (5):
hw/scsi/viosrp: Add missing 'hw/scsi/srp.h' include
hw/scsi/spapr_vscsi: Use SRP_MAX_IU_LEN instead of sizeof flexible
array
hw/scsi/spapr_vscsi: Simplify a bit
hw/scsi/spapr_vscsi: Introduce req_ui() helper
hw/scsi/spapr_vscsi: Do not mix SRP IU size with DMA buffer size
hw/scsi/viosrp.h | 4 ++-
hw/scsi/spapr_vscsi.c | 60 ++++++++++++++++++++++++-------------------
2 files changed, 37 insertions(+), 27 deletions(-)
--
2.21.1
- [PATCH 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use,
Philippe Mathieu-Daudé <=