From 600643cdde625fe6c64c9e3d33ed966094aac09f Mon Sep 17 00:00:00 2001
From: Mark Haverkamp <markh@osdl.org>
Date: Wed, 11 Jan 2006 09:28:07 -0800
Subject: [PATCH] --- yaml --- r: 18426 b: refs/heads/master c:
 6e289a9023d589c24f86b29186d324215cdc9947 h: refs/heads/master v: v3

---
 [refs]                                | 2 +-
 trunk/drivers/scsi/aacraid/commctrl.c | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/[refs] b/[refs]
index 42a597f08f5e..34bb41e11dd5 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 33b114e935a2202206e224dd2c695cee5a5986bf
+refs/heads/master: 6e289a9023d589c24f86b29186d324215cdc9947
diff --git a/trunk/drivers/scsi/aacraid/commctrl.c b/trunk/drivers/scsi/aacraid/commctrl.c
index ef623bd965f5..4fe79cd7c957 100644
--- a/trunk/drivers/scsi/aacraid/commctrl.c
+++ b/trunk/drivers/scsi/aacraid/commctrl.c
@@ -85,6 +85,10 @@ static int ioctl_send_fib(struct aac_dev * dev, void __user *arg)
 	if (size < le16_to_cpu(kfib->header.SenderSize))
 		size = le16_to_cpu(kfib->header.SenderSize);
 	if (size > dev->max_fib_size) {
+		if (size > 2048) {
+			retval = -EINVAL;
+			goto cleanup;
+		}
 		/* Highjack the hw_fib */
 		hw_fib = fibptr->hw_fib;
 		hw_fib_pa = fibptr->hw_fib_pa;