[SCSI] libiscsi: fix potential buffer overrun in __iscsi_conn_send_pdu
authorMike Christie <michaelc@cs.wisc.edu>
Wed, 3 Sep 2014 05:00:39 +0000 (00:00 -0500)
committerJames Bottomley <JBottomley@Parallels.com>
Fri, 19 Sep 2014 12:22:59 +0000 (13:22 +0100)
commitdb9bfd64b14a3a8f1868d2164518fdeab1b26ad1
tree3799037192bc9e23b2e67e2b2b76db60f9e2a7da
parentf3b5933190c1fc5ad8f3a1dec594e9e849e088c0
[SCSI] libiscsi: fix potential buffer overrun in __iscsi_conn_send_pdu

This patches fixes a potential buffer overrun in __iscsi_conn_send_pdu.
This function is used by iscsi drivers and userspace to send iscsi PDUs/
commands. For login commands, we have a set buffer size. For all other
commands we do not support data buffers.

This was reported by Dan Carpenter here:
http://www.spinics.net/lists/linux-scsi/msg66838.html

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mike Christie <michaelc@cs.wisc.edu>
Reviewed-by: Sagi Grimberg <sagig@mellanox.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Cc: stable@vger.kernel.org
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
drivers/scsi/libiscsi.c