1. 06 5月, 2007 2 次提交
  2. 01 4月, 2007 1 次提交
    • A
      [SCSI] lpfc: fix oops when parsing dodgy VPD · 07da60c1
      Anton Blanchard 提交于
      We have seen two cases where VPD on an emulex card has been incorrect
      and we end up walking off the end of memory. It looks like someone made
      an update (increased the length of a string) without increasing the
      Length field. Then we do:
      
      	Length -= (3+i);
      
      And since Length is unsigned it becomes very large and we loop forever
      in the encapsulating:
      
      	while (Length > 0) {
      
      If we make Length signed then we fall out of the loop and proceed on.
      
      Its important to note we have only seen this in the lab and it may be
      the only two cases of this in existence, but since the rest of the code
      has been written to be resilient against bad VPD we may as well fix this
      too.
      Signed-off-by: NAnton Blanchard <anton@samba.org>
      Acked-by: NJames Smart <James.Smart@Emulex.Com>
      Signed-off-by: NJames Bottomley <James.Bottomley@SteelEye.com>
      07da60c1
  3. 11 3月, 2007 1 次提交
  4. 16 2月, 2007 1 次提交
  5. 03 12月, 2006 6 次提交
  6. 27 9月, 2006 1 次提交
  7. 05 9月, 2006 1 次提交
  8. 03 9月, 2006 1 次提交
  9. 20 8月, 2006 1 次提交
  10. 07 8月, 2006 1 次提交
  11. 09 7月, 2006 4 次提交
  12. 03 7月, 2006 1 次提交
  13. 27 6月, 2006 2 次提交
  14. 20 4月, 2006 3 次提交
  15. 12 3月, 2006 1 次提交
  16. 07 3月, 2006 1 次提交
  17. 06 3月, 2006 2 次提交
  18. 01 3月, 2006 3 次提交
  19. 14 12月, 2005 7 次提交