davidlt/kernel-ark
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
kernel-ark/drivers/scsi
History
KAMBAROV, ZAUR a77e3362a2 [PATCH] coverity: i386: scsi_lib buffer overrun fix 
The check in

627  		BUG_ON(index > SG_MEMPOOL_NR);

with SG_MEMPOOL_NR defined in

32   	#define SG_MEMPOOL_NR		(sizeof(scsi_sg_pools)/sizeof(struct scsi_host_sg_pool))

was not sufficient.

sgp, set in

629  		sgp = scsi_sg_pools + index;

is dereferenced in

630  		mempool_free(sgl, sgp->pool);

Signed-off-by: Zaur Kambarov <zkambarov@coverity.com>
Cc: <linux-scsi@vger.kernel.org>
Cc: James Bottomley <James.Bottomley@steeleye.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-06-28 21:20:33 -07:00
..
aacraid
[SCSI] aacraid: regression fix
2005-06-17 20:36:28 -05:00
aic7xxx
aic7xxx/aic79xx_osm: revert completely bogus ahd_linux_queue() patch
2005-06-19 21:50:12 -04:00
aic7xxx_old
…
arm
[PATCH] Driver Core: drivers/s390/net/qeth_sys.c - drivers/usb/gadget/pxa2xx_udc.c: update device attribute callbacks
2005-06-20 15:15:35 -07:00
dpt
…
ibmvscsi
[SCSI] allow sleeping in ->eh_device_reset_handler()
2005-06-17 12:05:03 -05:00
lpfc
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
megaraid
[PATCH] Driver Core: drivers/s390/net/qeth_sys.c - drivers/usb/gadget/pxa2xx_udc.c: update device attribute callbacks
2005-06-20 15:15:35 -07:00
pcmcia
[PATCH] pcmcia: id_table for nsp_cs.c
2005-06-27 18:03:16 -07:00
qla2xxx
merge by hand (qla_os.c mismerge)
2005-06-17 19:04:18 -05:00
sym53c8xx_2
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
3w-9xxx.c
[PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback.
2005-06-27 21:52:47 -07:00
3w-9xxx.h
…
3w-xxxx.c
[PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback.
2005-06-27 21:52:47 -07:00
3w-xxxx.h
…
53c7xx_d.h_shipped
…
53c7xx_u.h_shipped
…
53c7xx.c
…
53c7xx.h
…
53c7xx.scr
…
53c700_d.h_shipped
…
53c700.c
[PATCH] Driver Core: drivers/s390/net/qeth_sys.c - drivers/usb/gadget/pxa2xx_udc.c: update device attribute callbacks
2005-06-20 15:15:35 -07:00
53c700.h
…
53c700.scr
…
a100u2w.c
…
a100u2w.h
…
a2091.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
a2091.h
…
a3000.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
a3000.h
…
advansys.c
…
advansys.h
…
aha152x.c
[SCSI] allow sleeping in ->eh_device_reset_handler()
2005-06-17 12:05:03 -05:00
aha152x.h
…
aha1542.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
aha1542.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
aha1740.c
…
aha1740.h
…
ahci.c
[PATCH] libata: ahci: remove ata_port_start/stop() calls
2005-06-28 00:08:00 -04:00
aic7xxx_old.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
amiga7xx.c
…
amiga7xx.h
…
ata_piix.c
…
atari_dma_emul.c
…
atari_NCR5380.c
…
atari_scsi.c
…
atari_scsi.h
…
atp870u.c
…
atp870u.h
…
blz1230.c
…
blz2060.c
…
BusLogic.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
BusLogic.h
…
bvme6000.c
…
bvme6000.h
…
ch.c
…
constants.c
…
cpqfcTS.h
…
cpqfcTSchip.h
…
cpqfcTScontrol.c
…
cpqfcTSi2c.c
…
cpqfcTSinit.c
…
cpqfcTSioctl.h
…
cpqfcTSstructs.h
…
cpqfcTStrigger.c
…
cpqfcTStrigger.h
…
cpqfcTSworker.c
…
cyberstorm.c
…
cyberstormII.c
…
dc395x.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
dc395x.h
…
dec_esp.c
…
dmx3191d.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
dpt_i2o.c
[PATCH] drivers/scsi/dpt*: remove version.h dependencies
2005-06-25 16:25:03 -07:00
dpti.h
[PATCH] drivers/scsi/dpt*: remove version.h dependencies
2005-06-25 16:25:03 -07:00
dtc.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
dtc.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
eata_generic.h
…
eata_pio.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
eata_pio.h
…
eata.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
esp.c
…
esp.h
…
fastlane.c
…
fcal.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
fcal.h
…
fd_mcs.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
fdomain.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
fdomain.h
…
FlashPoint.c
…
g_NCR5380_mmio.c
…
g_NCR5380.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
g_NCR5380.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
gdth_ioctl.h
…
gdth_kcompat.h
…
gdth_proc.c
…
gdth_proc.h
…
gdth.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
gdth.h
…
gvp11.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
gvp11.h
…
hosts.c
[PATCH] make various thing static
2005-06-24 00:06:43 -07:00
hosts.h
…
ibmmca.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
ibmmca.h
…
ide-scsi.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
imm.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
imm.h
…
in2000.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
in2000.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
initio.c
[PATCH] drivers/scsi/initio.c: cleanups
2005-06-25 16:25:00 -07:00
initio.h
[PATCH] drivers/scsi/initio.c: cleanups
2005-06-25 16:25:00 -07:00
ipr.c
[PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback.
2005-06-27 21:52:47 -07:00
ipr.h
…
ips.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
ips.h
…
jazz_esp.c
…
Kconfig
merge by hand (fix up qla_os.c merge error)
2005-06-17 18:42:23 -05:00
lasi700.c
…
libata-core.c
[PATCH] libata: lengthen COMMRESET delay
2005-06-28 00:05:57 -04:00
libata-scsi.c
[PATCH] libata fix read capacity handling for more than 2TB
2005-06-27 00:47:48 -04:00
libata.h
…
mac53c94.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
mac53c94.h
…
mac_esp.c
…
mac_scsi.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
mac_scsi.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
Makefile
…
mca_53c9x.c
…
megaraid.c
[PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback.
2005-06-27 21:52:47 -07:00
megaraid.h
…
mesh.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
mesh.h
…
mvme16x.c
…
mvme16x.h
…
mvme147.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
mvme147.h
…
ncr53c8xx.c
…
ncr53c8xx.h
…
NCR53c406a.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
NCR53C9x.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
NCR53C9x.h
…
NCR5380.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
NCR5380.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
NCR_D700.c
…
NCR_D700.h
…
NCR_Q720.c
…
NCR_Q720.h
…
nsp32_debug.c
…
nsp32_io.h
…
nsp32.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
nsp32.h
…
oktagon_esp.c
…
oktagon_io.S
…
osst_detect.h
…
osst_options.h
…
osst.c
[PATCH] class: convert drivers/scsi/* to use the new class api instead of class_simple
2005-06-20 15:15:08 -07:00
osst.h
…
pas16.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
pas16.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
pci2000.h
…
pluto.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
pluto.h
…
ppa.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
ppa.h
…
psi240i.c
…
psi240i.h
…
psi_chip.h
…
ql1040_fw.h
…
ql1280_fw.h
…
ql12160_fw.h
…
qla1280.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
qla1280.h
…
qlogicfas408.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
qlogicfas408.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
qlogicfas.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
qlogicfc_asm.c
…
qlogicfc.c
…
qlogicisp_asm.c
…
qlogicisp.c
…
qlogicpti_asm.c
…
qlogicpti.c
…
qlogicpti.h
…
sata_nv.c
…
sata_promise.c
…
sata_promise.h
…
sata_qstor.c
…
sata_sil.c
…
sata_sis.c
…
sata_svw.c
…
sata_sx4.c
…
sata_uli.c
…
sata_via.c
…
sata_vsc.c
…
script_asm.pl
…
scsi_debug.c
[PATCH] make various thing static
2005-06-24 00:06:43 -07:00
scsi_debug.h
…
scsi_devinfo.c
…
scsi_error.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
scsi_ioctl.c
…
scsi_lib.c
[PATCH] coverity: i386: scsi_lib buffer overrun fix
2005-06-28 21:20:33 -07:00
scsi_logging.h
…
scsi_module.c
…
scsi_priv.h
[PATCH] make various thing static
2005-06-24 00:06:43 -07:00
scsi_proc.c
…
scsi_scan.c
merge by hand (fix up qla_os.c merge error)
2005-06-17 18:42:23 -05:00
scsi_sysctl.c
…
scsi_sysfs.c
[PATCH] make various thing static
2005-06-24 00:06:43 -07:00
scsi_transport_fc.c
…
scsi_transport_iscsi.c
…
scsi_transport_spi.c
[PATCH] use device_for_each_child() to properly access child devices.
2005-06-20 15:15:22 -07:00
scsi_typedefs.h
…
scsi.c
[PATCH] make various thing static
2005-06-24 00:06:43 -07:00
scsi.h
…
scsicam.c
…
sd.c
…
seagate.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
seagate.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
sg.c
[PATCH] class: convert drivers/scsi/* to use the new class api instead of class_simple
2005-06-20 15:15:08 -07:00
sgiwd93.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
sgiwd93.h
…
sim710.c
…
sr_ioctl.c
…
sr_vendor.c
…
sr.c
…
sr.h
…
st_options.h
…
st.c
[PATCH] class: convert drivers/scsi/* to use the new class api instead of class_simple
2005-06-20 15:15:08 -07:00
st.h
…
sun3_NCR5380.c
…
sun3_scsi_vme.c
…
sun3_scsi.c
…
sun3_scsi.h
…
sun3x_esp.c
…
sym53c8xx_comm.h
…
sym53c8xx_defs.h
…
sym53c416.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
sym53c416.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
t128.c
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
t128.h
[SCSI] Remove no-op implementations of SCSI EH hooks
2005-06-17 12:04:45 -05:00
tmscsim.c
[SCSI] allow sleeping in ->eh_bus_reset_handler()
2005-06-17 12:05:10 -05:00
tmscsim.h
…
u14-34f.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
ultrastor.c
[SCSI] allow sleeping in ->eh_abort_handler()
2005-06-17 12:04:55 -05:00
ultrastor.h
…
wd33c93.c
…
wd33c93.h
…
wd7000.c
[SCSI] allow sleeping in ->eh_host_reset_handler()
2005-06-17 12:05:18 -05:00
zalon.c
…