diff options
| author | Andrew Vasquez <andrew.vasquez@qlogic.com> | 2012-02-09 14:14:08 -0500 |
|---|---|---|
| committer | James Bottomley <JBottomley@Parallels.com> | 2012-02-18 09:47:27 -0500 |
| commit | 67ddda353c4e26ba23a199ae64fdf283b669469b (patch) | |
| tree | 021105a5e86cf8888d6223202d081ebdc433cddb /drivers/scsi/qla2xxx/qla_os.c | |
| parent | 7cb0eb1c17fa69535b6b2a80296c2f2ca300b800 (diff) | |
[SCSI] qla2xxx: Correct out of bounds read of ISP2200 mailbox registers.
ISP2200 adapters only have 24 mailbox registers so read only that many.
Reported-by: Olatunji Ruwase <oor@cs.cmu.edu>
Signed-off-by: Andrew Vasquez <andrew.vasquez@qlogic.com>
Signed-off-by: Chad Dupuis <chad.dupuis@qlogic.com>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Diffstat (limited to 'drivers/scsi/qla2xxx/qla_os.c')
| -rw-r--r-- | drivers/scsi/qla2xxx/qla_os.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/scsi/qla2xxx/qla_os.c b/drivers/scsi/qla2xxx/qla_os.c index 5fd89d761688..7e617a60e71f 100644 --- a/drivers/scsi/qla2xxx/qla_os.c +++ b/drivers/scsi/qla2xxx/qla_os.c | |||
| @@ -2054,7 +2054,7 @@ qla2x00_probe_one(struct pci_dev *pdev, const struct pci_device_id *id) | |||
| 2054 | ha->nvram_data_off = ~0; | 2054 | ha->nvram_data_off = ~0; |
| 2055 | ha->isp_ops = &qla2100_isp_ops; | 2055 | ha->isp_ops = &qla2100_isp_ops; |
| 2056 | } else if (IS_QLA2200(ha)) { | 2056 | } else if (IS_QLA2200(ha)) { |
| 2057 | ha->mbx_count = MAILBOX_REGISTER_COUNT; | 2057 | ha->mbx_count = MAILBOX_REGISTER_COUNT_2200; |
| 2058 | req_length = REQUEST_ENTRY_CNT_2200; | 2058 | req_length = REQUEST_ENTRY_CNT_2200; |
| 2059 | rsp_length = RESPONSE_ENTRY_CNT_2100; | 2059 | rsp_length = RESPONSE_ENTRY_CNT_2100; |
| 2060 | ha->max_loop_id = SNS_LAST_LOOP_ID_2100; | 2060 | ha->max_loop_id = SNS_LAST_LOOP_ID_2100; |