mirrors/scst
1
0
Fork 0
mirror of https://github.com/SCST-project/scst.git synced 2026-05-29 18:00:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix possible crash if misbehaving dev handler tries to set too big response data len.

Browse Source 
git-svn-id: http://svn.code.sf.net/p/scst/svn/trunk@4670 d57e44dd-8a1f-0410-8b47-8ef2f437770f
This commit is contained in:
Vladislav Bolkhovitin
2012-12-28 23:20:07 +00:00
parent 3f77da8c4d
commit 874f8d5943
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
scst/src/scst_lib.c
View File

@@ -2865,6 +2865,14 @@ void scst_set_resp_data_len(struct scst_cmd *cmd, int resp_data_len)
TRACE_DBG("cmd %p, resp_data_len %d", cmd, resp_data_len);
if (unlikely(resp_data_len > cmd->bufflen)) {
PRINT_ERROR("Too big response data len %d (max %d), limiting "
"it to the max (dev %s)", resp_data_len, cmd->bufflen,
cmd->dev->virt_name);
cmd->resp_data_len = cmd->bufflen;
goto out;
}
scst_adjust_sg(cmd, cmd->sg, &cmd->sg_cnt, resp_data_len);
cmd->resid_possible = 1;