linux/drivers/target/iscsi
Kees Cook cea4dcfdad iscsi-target: fix heap buffer overflow on error
If a key was larger than 64 bytes, as checked by iscsi_check_key(), the
error response packet, generated by iscsi_add_notunderstood_response(),
would still attempt to copy the entire key into the packet, overflowing
the structure on the heap.

Remote preauthentication kernel memory corruption was possible if a
target was configured and listening on the network.

CVE-2013-2850

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
2013-05-30 18:07:54 -07:00
..
iscsi_target_auth.c target/iscsi: Remove chap_set_random() 2013-04-25 01:05:22 -07:00
iscsi_target_auth.h
iscsi_target_configfs.c iscsi-target: Add iser network portal attribute 2013-04-25 01:05:28 -07:00
iscsi_target_configfs.h
iscsi_target_core.h iscsi-target: Add per transport iscsi_cmd alloc/free 2013-04-25 01:05:27 -07:00
iscsi_target_datain_values.c target/iscsi: Eliminate iscsi_cmd.data_length 2012-04-14 17:40:38 -07:00
iscsi_target_datain_values.h
iscsi_target_device.c iscsi-target: Refactor TX queue logic + export response PDU creation 2013-04-25 01:05:27 -07:00
iscsi_target_device.h target/iscsi: Remove unneeded wrapper functions 2012-02-25 14:37:47 -08:00
iscsi_target_erl0.c target: iscsi: fix comment typos in target/iscsi drivers 2012-11-19 14:17:31 +01:00
iscsi_target_erl0.h
iscsi_target_erl1.c iscsi-target: Fix processing of OOO commands 2013-05-07 16:51:58 -07:00
iscsi_target_erl1.h iscsit: use the itt_t abstract type 2012-10-03 14:21:50 -07:00
iscsi_target_erl2.c iscsi-target: Fix CmdSN comparison (use cmd->cmd_sn instead of cmd->stat_sn) 2013-01-10 21:00:37 -08:00
iscsi_target_erl2.h iscsit: proper endianess conversions 2012-10-03 14:39:22 -07:00
iscsi_target_login.c iscsi-target: Refactor RX PDU logic + export request PDU handling 2013-04-25 01:05:27 -07:00
iscsi_target_login.h iscsi-target: Initial traditional TCP conversion to iscsit_transport 2013-04-25 01:05:26 -07:00
iscsi_target_nego.c iscsi-target: Refactor RX PDU logic + export request PDU handling 2013-04-25 01:05:27 -07:00
iscsi_target_nego.h iscsi-target: Initial traditional TCP conversion to iscsit_transport 2013-04-25 01:05:26 -07:00
iscsi_target_nodeattrib.c iscsi-target: remove improper externs 2012-03-17 18:07:04 -07:00
iscsi_target_nodeattrib.h
iscsi_target_parameters.c iscsi-target: fix heap buffer overflow on error 2013-05-30 18:07:54 -07:00
iscsi_target_parameters.h iscsi-target: fix heap buffer overflow on error 2013-05-30 18:07:54 -07:00
iscsi_target_seq_pdu_list.c iscsi-target: Change iscsi_target_seq_pdu_list.c to honor MaxXmitDataSegmentLength 2012-10-02 13:17:33 -07:00
iscsi_target_seq_pdu_list.h target/iscsi: Fold _decide_list_to_build into _build_pdu_and_seq_lists 2012-04-14 17:40:38 -07:00
iscsi_target_stat.c target: don't truncate the fail intr address 2013-02-13 11:27:58 -08:00
iscsi_target_stat.h
iscsi_target_tmr.c iscsi-target: Refactor TX queue logic + export response PDU creation 2013-04-25 01:05:27 -07:00
iscsi_target_tmr.h
iscsi_target_tpg.c iscsi-target: Initial traditional TCP conversion to iscsit_transport 2013-04-25 01:05:26 -07:00
iscsi_target_tpg.h
iscsi_target_tq.c iscsi-target: Use list_first_entry() where appropriate 2012-11-06 20:55:45 -08:00
iscsi_target_tq.h iscsit: mark various functions static 2012-10-02 14:41:59 -07:00
iscsi_target_transport.c iscsi-target: Add iscsit_transport API template 2013-04-25 01:05:26 -07:00
iscsi_target_util.c iscsi-target: Refactor RX PDU logic + export request PDU handling 2013-04-25 01:05:27 -07:00
iscsi_target_util.h iscsi-target: Add per transport iscsi_cmd alloc/free 2013-04-25 01:05:27 -07:00
iscsi_target.c iscsi-target: Make buf param of iscsit_do_crypto_hash_buf() const void * 2013-05-03 16:49:48 -07:00
iscsi_target.h iscsi-target: Refactor RX PDU logic + export request PDU handling 2013-04-25 01:05:27 -07:00
Kconfig target: iscsi_target depends on NET 2011-07-28 20:16:18 +00:00
Makefile iscsi-target: Add iscsit_transport API template 2013-04-25 01:05:26 -07:00