linux/drivers/s390/cio
Sebastian Ott 878c495644 [S390] cio: fix potential overflow in chpid descriptor
The length filed in the chsc response block (if valid)
has a value of n*(sizeof(chp_desc))+8 (for the response
block header). When we memcopied from the response block
to the actual descriptor we copied 8 bytes too much.
The bug was not revealed since the descriptor is embedded
in struct channel_path.
Since we only write one descriptor at a time ignore the
length value and use sizeof(*desc).

Signed-off-by: Sebastian Ott <sebott@linux.vnet.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
2010-07-19 09:22:50 +02:00
..
airq.c
blacklist.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
blacklist.h
ccwgroup.c [S390] ccwgroup: add locking around drvdata access 2010-05-26 23:27:09 +02:00
ccwreq.c [S390] cio: unit check handling during internal I/O 2010-05-26 23:27:09 +02:00
chp.c sysfs: add struct file* to bin_attr callbacks 2010-05-21 09:37:31 -07:00
chp.h
chsc_sch.c [S390] avoid default_llseek in s390 drivers 2010-05-17 10:00:16 +02:00
chsc_sch.h
chsc.c [S390] cio: fix potential overflow in chpid descriptor 2010-07-19 09:22:50 +02:00
chsc.h
cio_debug.h
cio.c [S390] idle time accounting vs. machine checks 2010-05-17 10:00:15 +02:00
cio.h
cmf.c
crw.c
css.c [S390] avoid default_llseek in s390 drivers 2010-05-17 10:00:16 +02:00
css.h
device_fsm.c [S390] cio: use exception-save stsch 2010-04-22 17:17:19 +02:00
device_id.c
device_ops.c
device_pgid.c
device_status.c
device.c [S390] cio: fix init_count in case of recognition after steal lock 2010-03-08 12:25:30 +01:00
device.h
fcx.c
idset.c
idset.h
io_sch.h
ioasm.h [S390] cio: remove stsch 2010-05-26 23:27:09 +02:00
isc.c
itcw.c [S390] appldata/extmem/kvm: add missing GFP_KERNEL flag 2010-06-08 18:58:23 +02:00
Makefile
qdio_debug.c [S390] remove unused qdio flags in zfcp and qeth 2010-03-08 12:25:30 +01:00
qdio_debug.h
qdio_main.c [S390] qdio: remove API wrappers 2010-05-17 10:00:17 +02:00
qdio_setup.c [S390] qdio: remove memset hack 2010-05-17 10:00:17 +02:00
qdio_thinint.c [S390] qdio: set correct bit in dsci 2010-05-17 10:00:17 +02:00
qdio.h [S390] qdio: dont convert timestamps to microseconds 2010-05-17 10:00:17 +02:00