[SCSI] libiscsi: fix potential buffer overrun in __iscsi_conn_send_pdu
authorMike Christie <michaelc@cs.wisc.edu>
Wed, 3 Sep 2014 05:00:39 +0000 (00:00 -0500)
committerJames Bottomley <JBottomley@Parallels.com>
Fri, 19 Sep 2014 12:22:59 +0000 (13:22 +0100)
This patches fixes a potential buffer overrun in __iscsi_conn_send_pdu.
This function is used by iscsi drivers and userspace to send iscsi PDUs/
commands. For login commands, we have a set buffer size. For all other
commands we do not support data buffers.

This was reported by Dan Carpenter here:
http://www.spinics.net/lists/linux-scsi/msg66838.html

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mike Christie <michaelc@cs.wisc.edu>
Reviewed-by: Sagi Grimberg <sagig@mellanox.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Cc: stable@vger.kernel.org
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
drivers/scsi/libiscsi.c

Simple merge