[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH v2 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use
From: |
Philippe Mathieu-Daudé |
Subject: |
[PATCH v2 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use |
Date: |
Thu, 5 Mar 2020 09:31:30 +0100 |
This series fixes a dangerous zero-length array use.
Simples patches first to clean the issue in the last patch:
dissociate the buffer holding DMA requests with pointer to
SRP Information Unit packets.
v2: Addressed David Gibson review comments
Philippe Mathieu-Daudé (5):
hw/scsi/viosrp: Add missing 'hw/scsi/srp.h' include
hw/scsi/spapr_vscsi: Use SRP_MAX_IU_LEN instead of sizeof flexible
array
hw/scsi/spapr_vscsi: Simplify a bit
hw/scsi/spapr_vscsi: Introduce req_iu() helper
hw/scsi/spapr_vscsi: Do not mix SRP IU size with DMA buffer size
hw/scsi/viosrp.h | 3 ++-
hw/scsi/spapr_vscsi.c | 59 ++++++++++++++++++++++++-------------------
2 files changed, 35 insertions(+), 27 deletions(-)
--
2.21.1
- [PATCH v2 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use,
Philippe Mathieu-Daudé <=
- [MERGED PATCH v2 1/5] hw/scsi/viosrp: Add missing 'hw/scsi/srp.h' include, Philippe Mathieu-Daudé, 2020/03/05
- [MERGED PATCH v2 2/5] hw/scsi/spapr_vscsi: Use SRP_MAX_IU_LEN instead of sizeof flexible array, Philippe Mathieu-Daudé, 2020/03/05
- [PATCH v2 4/5] hw/scsi/spapr_vscsi: Introduce req_iu() helper, Philippe Mathieu-Daudé, 2020/03/05
- [MERGED PATCH v2 3/5] hw/scsi/spapr_vscsi: Simplify a bit, Philippe Mathieu-Daudé, 2020/03/05
- [PATCH v2 5/5] hw/scsi/spapr_vscsi: Do not mix SRP IU size with DMA buffer size, Philippe Mathieu-Daudé, 2020/03/05
- Re: [PATCH v2 0/5] hw/scsi/spapr_vscsi: Fix time bomb zero-length array use, Paolo Bonzini, 2020/03/05