[Qemu-devel] [PATCH] scsi: Guard against buflen exceeding req->cmd.xfer in scsi_disk_emulate_command

2012-01-24 Thread Thomas Higdon
On Tue, Jan 24, 2012 at 08:53:03AM -0500, Kevin Wolf wrote: > Am 23.01.2012 18:15, schrieb Thomas Higdon: > > This prevents the emulated SCSI device from trying to DMA more bytes to the > > initiator than are expected. Without this, the SCRIPTS code in the emulated > > LSI

Re: [Qemu-devel] [PATCH] scsi: restrict buffer length to req->cmd.xfer for responses to INQUIRY commands.

2012-01-23 Thread Thomas Higdon
On Mon, Jan 23, 2012 at 12:47:54PM -0500, Paolo Bonzini wrote: > On 01/23/2012 06:15 PM, Thomas Higdon wrote: > > This prevents the emulated SCSI device from trying to DMA more bytes to the > > initiator than are expected. Without this, the SCRIPTS code in the emulated >

[Qemu-devel] [PATCH] scsi: restrict buffer length to req->cmd.xfer for responses to INQUIRY commands.

2012-01-23 Thread Thomas Higdon
,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 -usb -vnc 0.0.0.0:80 -vga cirrus Signed-off-by: Thomas Higdon --- hw/scsi-disk.c |3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/hw/scsi-disk.c b/hw/scsi-disk.c index 5d8bf53..71fe2a3 100644 --- a/hw/scsi-disk.c +