linux/drivers/scsi/cxgbi
Mike Christie 1304be5fe0 [SCSI] libiscsi_tcp: fix max_r2t manipulation
Problem description from Xi Wang:
A large max_r2t could lead to integer overflow in subsequent call to
iscsi_tcp_r2tpool_alloc(), allocating a smaller buffer than expected
and leading to out-of-bounds write.

Signed-off-by: Mike Christie <michaelc@cs.wisc.edu>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
2012-02-19 08:09:00 -06:00
..
cxgb3i cxgb3: Rework t3_l2t_get to take a dst_entry instead of a neighbour. 2011-12-05 15:20:19 -05:00
cxgb4i cxgb4i: Handle dst_get_neighbour_noref() returning NULL. 2011-12-05 15:20:20 -05:00
Kconfig [SCSI] cxgb3i: change cxgb3i to use libcxgbi 2010-09-05 14:29:23 -03:00
libcxgbi.c [SCSI] libiscsi_tcp: fix max_r2t manipulation 2012-02-19 08:09:00 -06:00
libcxgbi.h switch ->is_visible() to returning umode_t 2012-01-03 22:54:55 -05:00
Makefile [SCSI] cxgb3i: change cxgb3i to use libcxgbi 2010-09-05 14:29:23 -03:00