diff options
| author | Brian King <brking@linux.vnet.ibm.com> | 2009-07-30 10:58:51 -0500 |
|---|---|---|
| committer | James Bottomley <James.Bottomley@suse.de> | 2009-08-22 17:52:12 -0500 |
| commit | 0124ca9d8ee58b3cd028a23cef2fe225fcfee3b8 (patch) | |
| tree | eb4e0d6607fa4d128aa24d8811d4c67d89732daf /drivers/scsi/ipr.h | |
| parent | c19dcd011238118ad07d3ab7ed1bbc4916826324 (diff) | |
| download | lwn-0124ca9d8ee58b3cd028a23cef2fe225fcfee3b8.tar.gz lwn-0124ca9d8ee58b3cd028a23cef2fe225fcfee3b8.zip | |
[SCSI] ipr: fix buffer overflow
ipr_cmd_label[] isn't big enough for an eight byte string plus terminator.
Fix by shortening the string to seven bytes.
Signed-off-by: Brian King <brking@linux.vnet.ibm.com>
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>
Diffstat (limited to 'drivers/scsi/ipr.h')
| -rw-r--r-- | drivers/scsi/ipr.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/scsi/ipr.h b/drivers/scsi/ipr.h index 4b63dd6b1c81..163245a1c3e5 100644 --- a/drivers/scsi/ipr.h +++ b/drivers/scsi/ipr.h @@ -1199,7 +1199,7 @@ struct ipr_ioa_cfg { struct ata_host ata_host; char ipr_cmd_label[8]; -#define IPR_CMD_LABEL "ipr_cmnd" +#define IPR_CMD_LABEL "ipr_cmd" struct ipr_cmnd *ipr_cmnd_list[IPR_NUM_CMD_BLKS]; u32 ipr_cmnd_list_dma[IPR_NUM_CMD_BLKS]; }; |