Skip to content

Commit

Permalink
isci: fix ssp response iu buffer size in isci_tmf
Browse files Browse the repository at this point in the history
In isci_task_request_complete() we save the response/sense data from the
command.  Make sure isci_tmf has enough space to hold the full response.

[ it does not look like we actually use this data, and
  response_data_len/sense_data_len should be specifying the byte count,
  in any event do the simple fix first so we don't corrupt memory ]

Reported-by: Adam Gruchala <adam.gruchala@intel.com>
Tested-by: Edmund Nadolski <edmund.nadolski@intel.com>
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
  • Loading branch information
Dan Williams committed Jul 3, 2011
1 parent 0d0cf14 commit 360b03e
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion drivers/scsi/isci/task.h
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,8 @@ struct isci_tmf {
union {
struct ssp_response_iu resp_iu;
struct dev_to_host_fis d2h_fis;
} resp;
u8 rsp_buf[SSP_RESP_IU_MAX_SIZE];
} resp;
unsigned char lun[8];
u16 io_tag;
struct isci_remote_device *device;
Expand Down

0 comments on commit 360b03e

Please sign in to comment.