On 09/29/2014 02:06 PM, James Bottomley wrote: > On Mon, 2014-09-29 at 13:55 -0500, michaelc@xxxxxxxxxxx wrote: >> From: Mike Christie <michaelc@xxxxxxxxxxx> >> >> Dan Carpenter found a issue where be2iscsi would copy the ip >> from userspace to the driver buffer before checking the len >> of the data being copied: >> http://marc.info/?l=linux-scsi&m=140982651504251&w=2 >> >> This patch just has us only copy what we the driver buffer >> can support. >> >> Tested-by: John Soni Jose <sony.john-n@xxxxxxxxxx> >> Signed-off-by: Mike Christie <michaelc@xxxxxxxxxxx> > > This looks to be a long standing and potentially exploitable bug ... > does it need a cc to stable? > Yeah, sorry. Forgot to cc. Do you need me to resend with them ccd? -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
