diff options
| author | Ales Novak <alnovak@suse.cz> | 2015-08-31 22:48:16 +0200 |
|---|---|---|
| committer | James Bottomley <JBottomley@Odin.com> | 2015-10-27 02:08:51 +0100 |
| commit | 6599eaaa45e0f40ddbbcf164cf3e3524faed9383 (patch) | |
| tree | 1219d04b1e8030cd44ebac3aa6de9b7e6505e59a /drivers/scsi/lpfc/lpfc_hw.h | |
| parent | lpfc: remove set but not used variables (diff) | |
| download | linux-6599eaaa45e0f40ddbbcf164cf3e3524faed9383.tar.xz linux-6599eaaa45e0f40ddbbcf164cf3e3524faed9383.zip | |
fix: lpfc_send_rscn_event sends bigger buffer size
lpfc_send_rscn_event() allocates data for sizeof(struct
lpfc_rscn_event_header) + payload_len, but claims that the data has size
of sizeof(struct lpfc_els_event_header) + payload_len. That leads to
buffer overruns.
Signed-off-by: Ales Novak <alnovak@suse.cz>
Signed-off-by: James Smart <james.smart@avagotech.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sebastian Herbszt <herbszt@gmx.de>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
Diffstat (limited to 'drivers/scsi/lpfc/lpfc_hw.h')
0 files changed, 0 insertions, 0 deletions