Sebastian Ott 878c495644 [S390] cio: fix potential overflow in chpid descriptor ... The length filed in the chsc response block (if valid) has a value of n*(sizeof(chp_desc))+8 (for the response block header). When we memcopied from the response block to the actual descriptor we copied 8 bytes too much. The bug was not revealed since the descriptor is embedded in struct channel_path. Since we only write one descriptor at a time ignore the length value and use sizeof(*desc). Signed-off-by: Sebastian Ott <sebott@linux.vnet.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>		2010-07-19 09:22:50 +02:00
..
block	[S390] add missing device put	2010-07-19 09:22:50 +02:00
char	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2010-05-20 09:20:59 -07:00
cio	[S390] cio: fix potential overflow in chpid descriptor	2010-07-19 09:22:50 +02:00
crypto	[S390] avoid default_llseek in s390 drivers	2010-05-17 10:00:16 +02:00
kvm	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	2010-03-30 22:02:32 +09:00
net	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	2010-05-20 21:04:44 -07:00
scsi	Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-misc-2.6	2010-05-21 07:19:18 -07:00
Makefile	[S390] split/move machine check handler code	2009-03-26 15:24:10 +01:00