John Millikin fe9d8927e2 scsi: Add buf_len parameter to scsi_req_new() ... When a SCSI command is received from the guest, the CDB length implied by the first byte might exceed the number of bytes the guest sent. In this case scsi_req_new() will read uninitialized data, causing unpredictable behavior. Adds the buf_len parameter to scsi_req_new() and plumbs it through the call stack. Signed-off-by: John Millikin <john@john-millikin.com> Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1127 Message-Id: <20220817053458.698416-1-john@john-millikin.com> [Fill in correct length for adapters other than ESP. - Paolo] Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2022-09-01 07:42:37 +02:00
..
9pfs	trivial typos: namesapce	2022-06-28 11:06:44 +02:00
acpi	acpi/nvdimm: Define trace events for NVDIMM and substitute nvdimm_debug()	2022-07-26 10:37:46 -04:00
adc	hw/adc: Make adci[*] R/W in NPCM7XX ADC	2022-07-18 13:20:14 +01:00
alpha
arm	hw: Add compat machines for 7.2	2022-08-25 21:59:04 +02:00
audio
avr
block	virtio-scsi: fix race in virtio_scsi_dataplane_start()	2022-08-17 07:07:37 -04:00
char
core	hw: Add compat machines for 7.2	2022-08-25 21:59:04 +02:00
cpu
cris
cxl	hw/cxl: Correctly handle variable sized mailbox input payloads.	2022-08-17 13:08:11 -04:00
display	xlnx_dp: drop unsupported AUXCommand in xlnx_dp_aux_set_command	2022-08-08 11:40:06 +02:00
dma
gpio	hw/gpio/aspeed: Don't let guests modify input pins	2022-07-14 16:24:38 +02:00
hppa	lasips2: remove legacy lasips2_initfn() function	2022-07-18 19:28:46 +01:00
hyperv
i2c	hw/i2c/pmbus: Add idle state to return 0xff's	2022-07-14 16:24:38 +02:00
i386	hw: Add compat machines for 7.2	2022-08-25 21:59:04 +02:00
ide	block: Change blk_{pread,pwrite}() param order	2022-07-12 12:14:56 +02:00
input	pckbd: remove legacy i8042_mm_init() function	2022-07-18 19:28:46 +01:00
intc	misc: fix commonly doubled up words	2022-08-01 11:58:02 +02:00
ipack
ipmi	ipmi:smbus: Add a check around a memcpy	2022-08-01 06:40:50 -05:00
isa	hw/i386/xen/xen-hvm: Inline xen_piix_pci_write_config_client() and remove it	2022-06-29 00:24:59 +02:00
loongarch	hw/loongarch: remove acpi-build.c unused variable 'aml_len'	2022-08-05 10:02:07 -07:00
m68k	hw: Add compat machines for 7.2	2022-08-25 21:59:04 +02:00
mem
microblaze
mips	hw/mips/malta: turn off x86 specific features of PIIX4_PM	2022-08-08 23:23:11 +02:00
misc	hw/misc/grlib_ahb_apb_pnp: Support 8 and 16 bit accesses	2022-08-08 23:43:11 +02:00
net	hw/net/rocker: Avoid undefined shifts with more than 31 ports	2022-08-09 17:02:18 +08:00
nios2	hw/nios2: virt: pass random seed to fdt	2022-07-22 19:01:44 +02:00
nubus
nvme	hw/nvme: do not enable ioeventfd by default	2022-08-01 12:01:21 +02:00
nvram	block: Change blk_{pread,pwrite}() param order	2022-07-12 12:14:56 +02:00
openrisc
pci	trivial patches pull request 20220629	2022-06-30 04:49:40 +05:30
pci-bridge
pci-host	i386/pc: create pci-host qdev prior to pc_memory_init()	2022-07-26 10:40:58 -04:00
pcmcia
ppc	hw: Add compat machines for 7.2	2022-08-25 21:59:04 +02:00
rdma
remote
riscv	hw/riscv: boot: Reduce FDT address alignment constraints	2022-07-03 10:03:20 +10:00
rtc	hw/rtc/ls7a_rtc: Drop unused inline functions	2022-07-05 16:17:53 +05:30
rx	hw/rx: pass random seed to fdt	2022-07-22 19:01:44 +02:00
s390x	s390x/cpumodel: add stfl197 processor-activity-instrumentation extension 1	2022-08-25 21:59:04 +02:00
scsi	scsi: Add buf_len parameter to scsi_req_new()	2022-09-01 07:42:37 +02:00
sd	block: Change blk_{pread,pwrite}() param order	2022-07-12 12:14:56 +02:00
sensor	hw/sensor: Add Renesas ISL69259 device model	2022-07-14 16:24:38 +02:00
sh4
smbios
sparc
sparc64
ssi	aspeed/smc: Fix potential overflow	2022-06-30 09:21:13 +02:00
timer
tpm
tricore
usb	scsi: Add buf_len parameter to scsi_req_new()	2022-09-01 07:42:37 +02:00
vfio
virtio	virtio-pci: don't touch pci on virtio reset	2022-08-17 13:08:11 -04:00
watchdog	ppc/spapr: Implement H_WATCHDOG	2022-07-06 10:22:38 -03:00
xen	xen/pass-through: don't create needless register group	2022-07-05 14:19:48 +01:00
xenpv
xtensa
Kconfig
meson.build