Mike Christie 1304be5fe0 [SCSI] libiscsi_tcp: fix max_r2t manipulation ...

Problem description from Xi Wang:
A large max_r2t could lead to integer overflow in subsequent call to
iscsi_tcp_r2tpool_alloc(), allocating a smaller buffer than expected
and leading to out-of-bounds write.

Signed-off-by: Mike Christie <michaelc@cs.wisc.edu>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>

2012-02-19 08:09:00 -06:00

..

cxgb3i

cxgb3: Rework t3_l2t_get to take a dst_entry instead of a neighbour.

2011-12-05 15:20:19 -05:00

cxgb4i

cxgb4i: Handle dst_get_neighbour_noref() returning NULL.

2011-12-05 15:20:20 -05:00

Kconfig

[SCSI] cxgb3i: change cxgb3i to use libcxgbi

2010-09-05 14:29:23 -03:00

libcxgbi.c

[SCSI] libiscsi_tcp: fix max_r2t manipulation

2012-02-19 08:09:00 -06:00

libcxgbi.h

switch ->is_visible() to returning umode_t

2012-01-03 22:54:55 -05:00

Makefile

[SCSI] cxgb3i: change cxgb3i to use libcxgbi

2010-09-05 14:29:23 -03:00