From: Dan Williams Date: Fri, 17 Jun 2011 00:20:35 +0000 (-0700) Subject: isci: fix smp response frame overrun X-Git-Tag: v3.0-rc6~1^2~1^2~23 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=5edc33480c1c363ab361a881f2957b9fba5185cf;p=profile%2Fivi%2Fkernel-x86-ivi.git isci: fix smp response frame overrun Due to a typo we currently copy way too much when copying over the response data, but since a request is likely backed by a full page allocation we don't corrupt live data. Signed-off-by: Dan Williams --- diff --git a/drivers/scsi/isci/request.c b/drivers/scsi/isci/request.c index ebe160c..f4fbca7 100644 --- a/drivers/scsi/isci/request.c +++ b/drivers/scsi/isci/request.c @@ -1694,7 +1694,7 @@ scic_sds_io_request_frame_handler(struct scic_sds_request *sci_req, frame_index, &smp_resp); - word_cnt = (sizeof(struct smp_req) - SMP_RESP_HDR_SZ) / + word_cnt = (sizeof(struct smp_resp) - SMP_RESP_HDR_SZ) / sizeof(u32); sci_swab32_cpy(((u8 *) rsp_hdr) + SMP_RESP_HDR_SZ,