Greg Edwards 56bce0e5d5 vhost/scsi: truncate T10 PI iov_iter to prot_bytes ...

commit 4542d623c7 upstream.

Commands with protection information included were not truncating the
protection iov_iter to the number of protection bytes in the command.
This resulted in vhost_scsi mis-calculating the size of the protection
SGL in vhost_scsi_calc_sgls(), and including both the protection and
data SG entries in the protection SGL.

Fixes: 09b13fa8c1 ("vhost/scsi: Add ANY_LAYOUT support in vhost_scsi_handle_vq")
Signed-off-by: Greg Edwards <gedwards@ddn.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Fixes: 09b13fa8c1
Cc: stable@vger.kernel.org
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-11-21 09:24:08 +01:00

..

Kconfig

tap: tap as an independent module

2017-02-11 20:59:41 -05:00

Kconfig.vringh

vhost: split out vringh Kconfig

2016-08-02 16:54:28 +03:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

net.c

vhost_net: validate sock before trying to put its fd

2018-07-22 14:28:47 +02:00

scsi.c

vhost/scsi: truncate T10 PI iov_iter to prot_bytes

2018-11-21 09:24:08 +01:00

test.c

Merge 4.8-rc5 into char-misc-next

2016-09-05 08:04:07 +02:00

test.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

vhost.c

vhost: Fix Spectre V1 vulnerability

2018-11-04 14:52:49 +01:00

vhost.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

vringh.c

vringh: kill off ACCESS_ONCE()

2016-12-16 00:13:36 +02:00

vsock.c

mm, tree wide: replace __GFP_REPEAT by __GFP_RETRY_MAYFAIL with more useful semantic

2017-07-12 16:26:03 -07:00