Mike Christie 1304be5fe0 [SCSI] libiscsi_tcp: fix max_r2t manipulation
Problem description from Xi Wang:
A large max_r2t could lead to integer overflow in subsequent call to
iscsi_tcp_r2tpool_alloc(), allocating a smaller buffer than expected
and leading to out-of-bounds write.

Signed-off-by: Mike Christie <michaelc@cs.wisc.edu>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
2012-02-19 08:09:00 -06:00
..
2012-02-06 14:37:52 -05:00
2012-01-26 18:36:48 +00:00
2012-02-02 14:00:43 +05:30
2012-01-20 08:24:22 -08:00
2012-01-14 15:07:24 -08:00
2012-02-09 15:41:29 -05:00
2012-02-08 19:06:30 -08:00
2012-02-09 13:51:13 -08:00
2012-01-23 08:44:53 -08:00
2012-02-01 15:26:00 -05:00
2012-01-13 10:12:23 -08:00
2012-02-07 15:54:02 -08:00
2012-01-02 13:04:55 +01:00
2012-01-11 23:58:47 -05:00