fix: lpfc_send_rscn_event sends bigger buffer size
authorAles Novak <alnovak@suse.cz>
Mon, 31 Aug 2015 20:48:16 +0000 (16:48 -0400)
committerJames Bottomley <JBottomley@Odin.com>
Tue, 27 Oct 2015 01:08:51 +0000 (10:08 +0900)
commit6599eaaa45e0f40ddbbcf164cf3e3524faed9383
tree1219d04b1e8030cd44ebac3aa6de9b7e6505e59a
parentdb6f1c2f900b536d23de386dc7f2a53aa80d7307
fix: lpfc_send_rscn_event sends bigger buffer size

lpfc_send_rscn_event() allocates data for sizeof(struct
lpfc_rscn_event_header) + payload_len, but claims that the data has size
of sizeof(struct lpfc_els_event_header) + payload_len. That leads to
buffer overruns.

Signed-off-by: Ales Novak <alnovak@suse.cz>
Signed-off-by: James Smart <james.smart@avagotech.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sebastian Herbszt <herbszt@gmx.de>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
drivers/scsi/lpfc/lpfc_els.c