summaryrefslogtreecommitdiffstats
path: root/drivers/scsi/qla2xxx/qla_os.c
diff options
context:
space:
mode:
authorAndrew Vasquez2012-02-09 20:14:08 +0100
committerJames Bottomley2012-02-18 15:47:27 +0100
commit67ddda353c4e26ba23a199ae64fdf283b669469b (patch)
tree021105a5e86cf8888d6223202d081ebdc433cddb /drivers/scsi/qla2xxx/qla_os.c
parent[SCSI] qla2xxx: Remove errant clearing of MBX_INTERRUPT flag during CT-IOCB p... (diff)
downloadkernel-qcow2-linux-67ddda353c4e26ba23a199ae64fdf283b669469b.tar.gz
kernel-qcow2-linux-67ddda353c4e26ba23a199ae64fdf283b669469b.tar.xz
kernel-qcow2-linux-67ddda353c4e26ba23a199ae64fdf283b669469b.zip
[SCSI] qla2xxx: Correct out of bounds read of ISP2200 mailbox registers.
ISP2200 adapters only have 24 mailbox registers so read only that many. Reported-by: Olatunji Ruwase <oor@cs.cmu.edu> Signed-off-by: Andrew Vasquez <andrew.vasquez@qlogic.com> Signed-off-by: Chad Dupuis <chad.dupuis@qlogic.com> Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Diffstat (limited to 'drivers/scsi/qla2xxx/qla_os.c')
-rw-r--r--drivers/scsi/qla2xxx/qla_os.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/scsi/qla2xxx/qla_os.c b/drivers/scsi/qla2xxx/qla_os.c
index 5fd89d761688..7e617a60e71f 100644
--- a/drivers/scsi/qla2xxx/qla_os.c
+++ b/drivers/scsi/qla2xxx/qla_os.c
@@ -2054,7 +2054,7 @@ qla2x00_probe_one(struct pci_dev *pdev, const struct pci_device_id *id)
ha->nvram_data_off = ~0;
ha->isp_ops = &qla2100_isp_ops;
} else if (IS_QLA2200(ha)) {
- ha->mbx_count = MAILBOX_REGISTER_COUNT;
+ ha->mbx_count = MAILBOX_REGISTER_COUNT_2200;
req_length = REQUEST_ENTRY_CNT_2200;
rsp_length = RESPONSE_ENTRY_CNT_2100;
ha->max_loop_id = SNS_LAST_LOOP_ID_2100;