John Millikin fe9d8927e2 scsi: Add buf_len parameter to scsi_req_new() ... When a SCSI command is received from the guest, the CDB length implied by the first byte might exceed the number of bytes the guest sent. In this case scsi_req_new() will read uninitialized data, causing unpredictable behavior. Adds the buf_len parameter to scsi_req_new() and plumbs it through the call stack. Signed-off-by: John Millikin <john@john-millikin.com> Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1127 Message-Id: <20220817053458.698416-1-john@john-millikin.com> [Fill in correct length for adapters other than ESP. - Paolo] Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2022-09-01 07:42:37 +02:00
..
emulation.h	Normalize header guard symbol definition.	2019-05-13 08:58:55 +02:00
esp.h	esp: convert ESPState pdma_cb from a function pointer to an integer	2022-03-09 09:29:10 +00:00
scsi.h	scsi: Add buf_len parameter to scsi_req_new()	2022-09-01 07:42:37 +02:00