target_core_rd: break out unterminated loop during copy
authorHannes Reinecke <hare@suse.de>
Wed, 6 Feb 2013 13:42:28 +0000 (14:42 +0100)
committerNicholas Bellinger <nab@linux-iscsi.org>
Wed, 13 Feb 2013 19:54:29 +0000 (11:54 -0800)
The loop in rd_execute_rw() will never terminate if the
sg element has a zero size. Or it'll spill over into
outer space if the sg element is larger than the available
space.
So we need to add some safety catches here.

Cc: Nic Bellinger <nab@risingtidesystems.com>
Signed-off-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
drivers/target/target_core_rd.c

Simple merge