kernel-ark/drivers/scsi
KAMBAROV, ZAUR a77e3362a2 [PATCH] coverity: i386: scsi_lib buffer overrun fix
The check in

627  		BUG_ON(index > SG_MEMPOOL_NR);

with SG_MEMPOOL_NR defined in

32   	#define SG_MEMPOOL_NR		(sizeof(scsi_sg_pools)/sizeof(struct scsi_host_sg_pool))

was not sufficient.

sgp, set in

629  		sgp = scsi_sg_pools + index;

is dereferenced in

630  		mempool_free(sgl, sgp->pool);

Signed-off-by: Zaur Kambarov <zkambarov@coverity.com>
Cc: <linux-scsi@vger.kernel.org>
Cc: James Bottomley <James.Bottomley@steeleye.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-06-28 21:20:33 -07:00
..
aacraid [SCSI] aacraid: regression fix 2005-06-17 20:36:28 -05:00
aic7xxx aic7xxx/aic79xx_osm: revert completely bogus ahd_linux_queue() patch 2005-06-19 21:50:12 -04:00
aic7xxx_old
arm [PATCH] Driver Core: drivers/s390/net/qeth_sys.c - drivers/usb/gadget/pxa2xx_udc.c: update device attribute callbacks 2005-06-20 15:15:35 -07:00
dpt
ibmvscsi [SCSI] allow sleeping in ->eh_device_reset_handler() 2005-06-17 12:05:03 -05:00
lpfc [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
megaraid [PATCH] Driver Core: drivers/s390/net/qeth_sys.c - drivers/usb/gadget/pxa2xx_udc.c: update device attribute callbacks 2005-06-20 15:15:35 -07:00
pcmcia [PATCH] pcmcia: id_table for nsp_cs.c 2005-06-27 18:03:16 -07:00
qla2xxx merge by hand (qla_os.c mismerge) 2005-06-17 19:04:18 -05:00
sym53c8xx_2 [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
3w-9xxx.c [PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback. 2005-06-27 21:52:47 -07:00
3w-9xxx.h
3w-xxxx.c [PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback. 2005-06-27 21:52:47 -07:00
3w-xxxx.h
53c7xx_d.h_shipped
53c7xx_u.h_shipped
53c7xx.c
53c7xx.h
53c7xx.scr
53c700_d.h_shipped
53c700.c [PATCH] Driver Core: drivers/s390/net/qeth_sys.c - drivers/usb/gadget/pxa2xx_udc.c: update device attribute callbacks 2005-06-20 15:15:35 -07:00
53c700.h
53c700.scr
a100u2w.c
a100u2w.h
a2091.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
a2091.h
a3000.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
a3000.h
advansys.c
advansys.h
aha152x.c [SCSI] allow sleeping in ->eh_device_reset_handler() 2005-06-17 12:05:03 -05:00
aha152x.h
aha1542.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
aha1542.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
aha1740.c
aha1740.h
ahci.c [PATCH] libata: ahci: remove ata_port_start/stop() calls 2005-06-28 00:08:00 -04:00
aic7xxx_old.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
amiga7xx.c
amiga7xx.h
ata_piix.c Automatic merge of /spare/repo/linux-2.6/.git branch HEAD 2005-06-02 18:43:09 -04:00
atari_dma_emul.c
atari_NCR5380.c
atari_scsi.c
atari_scsi.h
atp870u.c
atp870u.h
blz1230.c
blz2060.c
BusLogic.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
BusLogic.h
bvme6000.c
bvme6000.h
ch.c
constants.c
cpqfcTS.h
cpqfcTSchip.h
cpqfcTScontrol.c
cpqfcTSi2c.c
cpqfcTSinit.c
cpqfcTSioctl.h
cpqfcTSstructs.h
cpqfcTStrigger.c
cpqfcTStrigger.h
cpqfcTSworker.c
cyberstorm.c
cyberstormII.c
dc395x.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
dc395x.h
dec_esp.c
dmx3191d.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
dpt_i2o.c [PATCH] drivers/scsi/dpt*: remove version.h dependencies 2005-06-25 16:25:03 -07:00
dpti.h [PATCH] drivers/scsi/dpt*: remove version.h dependencies 2005-06-25 16:25:03 -07:00
dtc.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
dtc.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
eata_generic.h
eata_pio.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
eata_pio.h
eata.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
esp.c
esp.h
fastlane.c
fcal.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
fcal.h
fd_mcs.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
fdomain.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
fdomain.h
FlashPoint.c
g_NCR5380_mmio.c
g_NCR5380.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
g_NCR5380.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
gdth_ioctl.h
gdth_kcompat.h
gdth_proc.c
gdth_proc.h
gdth.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
gdth.h
gvp11.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
gvp11.h
hosts.c [PATCH] make various thing static 2005-06-24 00:06:43 -07:00
hosts.h
ibmmca.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
ibmmca.h
ide-scsi.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
imm.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
imm.h
in2000.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
in2000.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
initio.c [PATCH] drivers/scsi/initio.c: cleanups 2005-06-25 16:25:00 -07:00
initio.h [PATCH] drivers/scsi/initio.c: cleanups 2005-06-25 16:25:00 -07:00
ipr.c [PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback. 2005-06-27 21:52:47 -07:00
ipr.h
ips.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
ips.h
jazz_esp.c
Kconfig merge by hand (fix up qla_os.c merge error) 2005-06-17 18:42:23 -05:00
lasi700.c
libata-core.c [PATCH] libata: lengthen COMMRESET delay 2005-06-28 00:05:57 -04:00
libata-scsi.c [PATCH] libata fix read capacity handling for more than 2TB 2005-06-27 00:47:48 -04:00
libata.h libata: bump version 2005-05-29 14:48:20 -04:00
mac53c94.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
mac53c94.h
mac_esp.c
mac_scsi.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
mac_scsi.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
Makefile
mca_53c9x.c
megaraid.c [PATCH] PCI: make drivers use the pci shutdown callback instead of the driver core callback. 2005-06-27 21:52:47 -07:00
megaraid.h
mesh.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
mesh.h
mvme16x.c
mvme16x.h
mvme147.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
mvme147.h
ncr53c8xx.c
ncr53c8xx.h
NCR53c406a.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
NCR53C9x.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
NCR53C9x.h
NCR5380.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
NCR5380.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
NCR_D700.c
NCR_D700.h
NCR_Q720.c
NCR_Q720.h
nsp32_debug.c
nsp32_io.h
nsp32.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
nsp32.h
oktagon_esp.c
oktagon_io.S
osst_detect.h
osst_options.h
osst.c [PATCH] class: convert drivers/scsi/* to use the new class api instead of class_simple 2005-06-20 15:15:08 -07:00
osst.h
pas16.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
pas16.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
pci2000.h
pluto.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
pluto.h
ppa.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
ppa.h
psi240i.c
psi240i.h
psi_chip.h
ql1040_fw.h
ql1280_fw.h
ql12160_fw.h
qla1280.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
qla1280.h
qlogicfas408.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
qlogicfas408.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
qlogicfas.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
qlogicfc_asm.c
qlogicfc.c
qlogicisp_asm.c
qlogicisp.c
qlogicpti_asm.c
qlogicpti.c
qlogicpti.h
sata_nv.c libata: Fix use-after-iounmap 2005-05-26 21:54:27 -04:00
sata_promise.c Automatic merge of /spare/repo/linux-2.6/.git branch HEAD 2005-06-04 00:40:40 -04:00
sata_promise.h
sata_qstor.c libata: Fix use-after-iounmap 2005-05-26 21:54:27 -04:00
sata_sil.c [PATCH] sata_sil: Fix FIFO PCI Bus Arbitration kernel oops 2005-06-09 03:06:22 -04:00
sata_sis.c libata: Fix use-after-iounmap 2005-05-26 21:54:27 -04:00
sata_svw.c [PATCH] sata_svw: bump version number 2005-06-09 03:10:56 -04:00
sata_sx4.c libata: Fix use-after-iounmap 2005-05-26 21:54:27 -04:00
sata_uli.c libata: Fix use-after-iounmap 2005-05-26 21:54:27 -04:00
sata_via.c libata: Fix use-after-iounmap 2005-05-26 21:54:27 -04:00
sata_vsc.c Automatic merge of /spare/repo/netdev-2.6 branch use-after-unmap 2005-05-29 14:24:57 -04:00
script_asm.pl
scsi_debug.c [PATCH] make various thing static 2005-06-24 00:06:43 -07:00
scsi_debug.h
scsi_devinfo.c
scsi_error.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
scsi_ioctl.c
scsi_lib.c [PATCH] coverity: i386: scsi_lib buffer overrun fix 2005-06-28 21:20:33 -07:00
scsi_logging.h
scsi_module.c
scsi_priv.h [PATCH] make various thing static 2005-06-24 00:06:43 -07:00
scsi_proc.c
scsi_scan.c merge by hand (fix up qla_os.c merge error) 2005-06-17 18:42:23 -05:00
scsi_sysctl.c
scsi_sysfs.c [PATCH] make various thing static 2005-06-24 00:06:43 -07:00
scsi_transport_fc.c
scsi_transport_iscsi.c
scsi_transport_spi.c [PATCH] use device_for_each_child() to properly access child devices. 2005-06-20 15:15:22 -07:00
scsi_typedefs.h
scsi.c [PATCH] make various thing static 2005-06-24 00:06:43 -07:00
scsi.h
scsicam.c
sd.c
seagate.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
seagate.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
sg.c [PATCH] class: convert drivers/scsi/* to use the new class api instead of class_simple 2005-06-20 15:15:08 -07:00
sgiwd93.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
sgiwd93.h
sim710.c
sr_ioctl.c
sr_vendor.c
sr.c
sr.h
st_options.h
st.c [PATCH] class: convert drivers/scsi/* to use the new class api instead of class_simple 2005-06-20 15:15:08 -07:00
st.h
sun3_NCR5380.c
sun3_scsi_vme.c
sun3_scsi.c
sun3_scsi.h
sun3x_esp.c
sym53c8xx_comm.h
sym53c8xx_defs.h
sym53c416.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
sym53c416.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
t128.c [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
t128.h [SCSI] Remove no-op implementations of SCSI EH hooks 2005-06-17 12:04:45 -05:00
tmscsim.c [SCSI] allow sleeping in ->eh_bus_reset_handler() 2005-06-17 12:05:10 -05:00
tmscsim.h
u14-34f.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
ultrastor.c [SCSI] allow sleeping in ->eh_abort_handler() 2005-06-17 12:04:55 -05:00
ultrastor.h
wd33c93.c
wd33c93.h
wd7000.c [SCSI] allow sleeping in ->eh_host_reset_handler() 2005-06-17 12:05:18 -05:00
zalon.c