1
0
mirror of https://github.com/torvalds/linux.git synced 2024-12-22 02:52:56 +00:00
linux/drivers/scsi/snic
Colin Ian King bbb7bace03 snic: correctly check for array overrun on overly long version number
The snic version number is expected to be 4 decimals in the form like a
netmask string with each number stored in an element in array v.
However, there is an off-by-one check on the number of elements in v
allowing one to pass a 5 decimal version number causing v[4] to be
referenced, causing a buffer overrun.  Fix the off-by-one error by
comparing to i > 3 rather than 4.

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Shane Seymour <shane.seymour@hpe.com>
Reviewed-by: Ewan Milne <emilne@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
2016-03-01 20:08:49 -05:00
..
cq_desc.h
cq_enet_desc.h
Makefile
snic_attrs.c
snic_ctl.c snic: correctly check for array overrun on overly long version number 2016-03-01 20:08:49 -05:00
snic_debugfs.c
snic_disc.c
snic_disc.h
snic_fwint.h
snic_io.c
snic_io.h
snic_isr.c
snic_main.c scsi: use host wide tags by default 2015-11-09 17:11:57 -08:00
snic_res.c
snic_res.h
snic_scsi.c
snic_stats.h
snic_trc.c
snic_trc.h
snic.h
vnic_cq_fw.h
vnic_cq.c
vnic_cq.h
vnic_dev.c
vnic_dev.h
vnic_devcmd.h
vnic_intr.c
vnic_intr.h
vnic_resource.h
vnic_snic.h
vnic_stats.h
vnic_wq.c
vnic_wq.h
wq_enet_desc.h