diff options
| author | Kevin Wolf | 2020-01-23 18:00:54 +0100 |
|---|---|---|
| committer | Kevin Wolf | 2020-01-27 17:19:53 +0100 |
| commit | 5fbf1d56c24018772e900a40a0955175ff82f35c (patch) | |
| tree | a59a377c3ba9f1e319e2b4417d09adac850f6397 /include/exec/memory.h | |
| parent | iscsi: Cap block count from GET LBA STATUS (CVE-2020-1711) (diff) | |
| download | qemu-5fbf1d56c24018772e900a40a0955175ff82f35c.tar.gz qemu-5fbf1d56c24018772e900a40a0955175ff82f35c.tar.xz qemu-5fbf1d56c24018772e900a40a0955175ff82f35c.zip | |
iscsi: Don't access non-existent scsi_lba_status_descriptor
In iscsi_co_block_status(), we may have received num_descriptors == 0
from the iscsi server. Therefore, we can't unconditionally access
lbas->descriptors[0]. Add the missing check.
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Felipe Franciosi <felipe@nutanix.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: John Snow <jsnow@redhat.com>
Reviewed-by: Peter Lieven <pl@kamp.de>
Diffstat (limited to 'include/exec/memory.h')
0 files changed, 0 insertions, 0 deletions