On Tue, 28 Apr 2020 16:19:39 +0300, Dan Carpenter wrote:
> Smatch complains that the "path_data->handle" variable is user
> controlled. It comes from iscsi_set_path() so that seems possible.
> It's harmless to add a limit check.
>
> The qedi->ep_tbl[] array has qedi->max_active_conns elements (which is
> always ISCSI_MAX_SESS_PER_HBA (4096) elements). The array is allocated
> in the qedi_cm_alloc_mem() function.
Applied to 5.8/scsi-queue, thanks!
[1/1] scsi: qedi: Check for buffer overflow in qedi_set_path()
https://git.kernel.org/mkp/scsi/c/4a4c0cfb4be7
--
Martin K. Petersen Oracle Linux Engineering
