diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2020-04-28 16:19:39 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-06-25 15:32:48 +0200 |
| commit | 84ef0da8910c97d733fa682198da2f501b3e89e9 (patch) | |
| tree | 623400254a4e18189f3c189bb3986f395189dc63 /sound/pci | |
| parent | b9e3114f7d0c4b1ea4b42fc3a0d06638151087b6 (diff) | |
| download | linux-stable-84ef0da8910c97d733fa682198da2f501b3e89e9.tar.gz linux-stable-84ef0da8910c97d733fa682198da2f501b3e89e9.tar.bz2 linux-stable-84ef0da8910c97d733fa682198da2f501b3e89e9.zip | |
scsi: qedi: Check for buffer overflow in qedi_set_path()
[ Upstream commit 4a4c0cfb4be74e216dd4446b254594707455bfc6 ]
Smatch complains that the "path_data->handle" variable is user controlled.
It comes from iscsi_set_path() so that seems possible. It's harmless to
add a limit check.
The qedi->ep_tbl[] array has qedi->max_active_conns elements (which is
always ISCSI_MAX_SESS_PER_HBA (4096) elements). The array is allocated in
the qedi_cm_alloc_mem() function.
Link: https://lore.kernel.org/r/20200428131939.GA696531@mwanda
Fixes: ace7f46ba5fd ("scsi: qedi: Add QLogic FastLinQ offload iSCSI driver framework.")
Acked-by: Manish Rangankar <mrangankar@marvell.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'sound/pci')
0 files changed, 0 insertions, 0 deletions