summaryrefslogtreecommitdiffstats
path: root/linux-user
diff options
context:
space:
mode:
authorFam Zheng2018-06-29 08:03:27 +0200
committerKevin Wolf2018-06-29 14:20:56 +0200
commit1439b9c11002348eb80fcd3c90f07bf0f4f088dc (patch)
tree0cbfeb4b9c895027927b85690eefd4cee4056121 /linux-user
parentqcow2: Fix src_offset in copy offloading (diff)
downloadqemu-1439b9c11002348eb80fcd3c90f07bf0f4f088dc.tar.gz
qemu-1439b9c11002348eb80fcd3c90f07bf0f4f088dc.tar.xz
qemu-1439b9c11002348eb80fcd3c90f07bf0f4f088dc.zip
iscsi: Don't blindly use designator length in response for memcpy
Per SCSI definition the designator_length we receive from INQUIRY is 8, 12 or at most 16, but we should be careful because the remote iscsi target may misbehave, otherwise we could have a buffer overflow. Reported-by: Max Reitz <mreitz@redhat.com> Signed-off-by: Fam Zheng <famz@redhat.com> Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Diffstat (limited to 'linux-user')
0 files changed, 0 insertions, 0 deletions