Paolo Bonzini 87e459a810 megasas: always store SCSIRequest* into MegasasCmd ...

This ensures that the request is unref'ed properly, and avoids a
segmentation fault in the new qtest testcase that is added.
This is CVE-2017-9503.

Reported-by: Zhangyanyu <zyy4013@stu.ouc.edu.cn>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

2017-06-15 11:04:05 +02:00

..

esp-pci.c

hw/scsi: Concentrate -drive if=scsi auto-create in one place

2017-02-21 13:17:45 +01:00

esp.c

hw/scsi: Concentrate -drive if=scsi auto-create in one place

2017-02-21 13:17:45 +01:00

lsi53c895a.c

scsi/lsi53c895a: Remove unused lsi_mem_*() return value

2017-06-04 18:42:55 +03:00

Makefile.objs

vhost-scsi: create a vhost-scsi-common abstraction

2017-05-05 12:10:00 +02:00

megasas.c

megasas: always store SCSIRequest* into MegasasCmd

2017-06-15 11:04:05 +02:00

mfi.h

Clean up header guards that don't match their file name

2016-07-12 16:19:16 +02:00

mpi.h

hw: Add support for LSI SAS1068 (mptsas) device

2016-02-09 15:45:26 +01:00

mptconfig.c

scsi: mptconfig: fix misuse of MPTSAS_CONFIG_PACK

2016-09-13 19:08:46 +02:00

mptendian.c

hw: Add support for LSI SAS1068 (mptsas) device

2016-02-09 15:45:26 +01:00

mptsas.c

scsi: mptsas: fix the wrong reading size in fetch request

2017-03-14 13:26:37 +01:00

mptsas.h

mptsas: really fix migration compatibility

2016-08-03 18:44:56 +02:00

scsi-bus.c

Changes to -drive without if= and with if=scsi

2017-02-21 13:58:50 +00:00

scsi-disk.c

hw/block: Request permissions

2017-02-28 20:40:36 +01:00

scsi-generic.c

scsi-generic: Fill in opt_xfer_len in INQUIRY reply if it is zero

2017-03-27 17:02:07 +02:00

spapr_vscsi.c

hw: Deprecate -drive if=scsi with non-onboard HBAs

2017-02-21 13:17:45 +01:00

srp.h

…

trace-events

spapr_vscsi: fix build error introduced by f19661c8

2016-10-05 11:05:28 +11:00

vhost-scsi-common.c

vhost-scsi: create a vhost-scsi-common abstraction

2017-05-05 12:10:00 +02:00

vhost-scsi.c

migration: Create migration/blocker.h

2017-05-17 12:04:59 +02:00

viosrp.h

…

virtio-scsi-dataplane.c

virtio-scsi: Fix acquire/release in dataplane handlers

2017-03-24 11:49:03 +01:00

virtio-scsi.c

virtio-scsi: Unset hotplug handler when unrealize

2017-06-06 20:18:36 +02:00

vmw_pvscsi.c

vmw_pvscsi: check message ring page count at initialisation

2017-05-05 12:09:59 +02:00

vmw_pvscsi.h

…