Maciej Patelczyk 7cafbf1bd5 isci: possible buffer overflow in isci_parse_oem_parameters fixed ... scu_index is a parameter of isci_parse_eom_parameters and is an index in controller table. There is a check: scu_index > SCI_MAX_CONTROLLERS which is insufficient and should be: scu_index >= SCI_MAX_CONTROLLERS. scu_index is used as an index in the table which size is SCI_MAX_CONTROLLERS. Signed-off-by: Maciej Patelczyk <maciej.patelczyk@intel.com> Signed-off-by: Dan Williams <dan.j.williams@intel.com>		2011-07-03 04:04:51 -07:00
..
firmware	isci: Added support for C0 to SCU Driver	2011-07-03 04:04:50 -07:00
host.c	isci: kill isci_remote_device_change_state()	2011-07-03 04:04:51 -07:00
host.h	isci: kill device_sequence	2011-07-03 04:04:51 -07:00
init.c	isci: Added support for C0 to SCU Driver	2011-07-03 04:04:50 -07:00
isci.h	isci: cleanup/optimize queue increment macros	2011-07-03 04:04:51 -07:00
Makefile	isci: additional state machine cleanup	2011-07-03 04:04:50 -07:00
phy.c	isci: Disable link layer hang detection	2011-07-03 04:04:50 -07:00
phy.h	isci: additional state machine cleanup	2011-07-03 04:04:50 -07:00
port_config.c	isci: state machine cleanup	2011-07-03 04:04:50 -07:00
port.c	isci: atomic device lookup and reference counting	2011-07-03 04:04:51 -07:00
port.h	isci: filter broadcast change notifications during SMP phy resets	2011-07-03 04:04:50 -07:00
probe_roms.c	isci: possible buffer overflow in isci_parse_oem_parameters fixed	2011-07-03 04:04:51 -07:00
probe_roms.h	isci: Retrieve the EFI variable for OEM parameter	2011-07-03 04:04:50 -07:00
registers.h	isci: uplevel register hardware data structures and unsolicited frame handling	2011-07-03 04:04:47 -07:00
remote_device.c	isci: kill device_sequence	2011-07-03 04:04:51 -07:00
remote_device.h	isci: kill device_sequence	2011-07-03 04:04:51 -07:00
remote_node_context.c	isci: Explicitly decode remote node ready and suspended states	2011-07-03 04:04:50 -07:00
remote_node_context.h	isci: additional state machine cleanup	2011-07-03 04:04:50 -07:00
remote_node_table.c	isci: uplevel request infrastructure	2011-07-03 04:04:47 -07:00
remote_node_table.h	isci: unify constants	2011-07-03 04:04:47 -07:00
request.c	isci: fix support for arbitrarily large smp requests	2011-07-03 04:04:51 -07:00
request.h	isci: fix support for arbitrarily large smp requests	2011-07-03 04:04:51 -07:00
sas.h	isci: fix support for arbitrarily large smp requests	2011-07-03 04:04:51 -07:00
sata.c	isci: atomic device lookup and reference counting	2011-07-03 04:04:51 -07:00
sata.h	isci: Convert ATA defines to Linux native defines	2011-07-03 04:04:46 -07:00
scu_completion_codes.h	isci: uplevel register hardware data structures and unsolicited frame handling	2011-07-03 04:04:47 -07:00
scu_event_codes.h	isci: uplevel register hardware data structures and unsolicited frame handling	2011-07-03 04:04:47 -07:00
scu_remote_node_context.h	isci: move remote_device handling out of the core	2011-07-03 04:00:38 -07:00
scu_task_context.h	isci: uplevel register hardware data structures and unsolicited frame handling	2011-07-03 04:04:47 -07:00
scu_unsolicited_frame.h	isci: uplevel register hardware data structures and unsolicited frame handling	2011-07-03 04:04:47 -07:00
task.c	isci: fix isci_task_execute_tmf completion	2011-07-03 04:04:51 -07:00
task.h	isci: atomic device lookup and reference counting	2011-07-03 04:04:51 -07:00
unsolicited_frame_control.c	isci: cleanup/optimize queue increment macros	2011-07-03 04:04:51 -07:00
unsolicited_frame_control.h	isci: remove 'min memory' infrastructure	2011-07-03 04:04:50 -07:00