Commit 360b03ed authored by Dan Williams's avatar Dan Williams

isci: fix ssp response iu buffer size in isci_tmf

In isci_task_request_complete() we save the response/sense data from the
command.  Make sure isci_tmf has enough space to hold the full response.

[ it does not look like we actually use this data, and
  response_data_len/sense_data_len should be specifying the byte count,
  in any event do the simple fix first so we don't corrupt memory ]
Reported-by: default avatarAdam Gruchala <adam.gruchala@intel.com>
Tested-by: default avatarEdmund Nadolski <edmund.nadolski@intel.com>
Signed-off-by: default avatarDan Williams <dan.j.williams@intel.com>
parent 0d0cf14c
...@@ -100,6 +100,7 @@ struct isci_tmf { ...@@ -100,6 +100,7 @@ struct isci_tmf {
union { union {
struct ssp_response_iu resp_iu; struct ssp_response_iu resp_iu;
struct dev_to_host_fis d2h_fis; struct dev_to_host_fis d2h_fis;
u8 rsp_buf[SSP_RESP_IU_MAX_SIZE];
} resp; } resp;
unsigned char lun[8]; unsigned char lun[8];
u16 io_tag; u16 io_tag;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment