Re: [Qemu-devel] [PATCH] scsi: check page count while initialising descriptor rings

[P J P]

+-- On Wed, 31 Aug 2016, P J P wrote --+
|  
| -    if ((ri->reqRingNumPages > PVSCSI_SETUP_RINGS_MAX_NUM_PAGES)
| -        || (ri->cmpRingNumPages > PVSCSI_SETUP_RINGS_MAX_NUM_PAGES)) {
| +    if (!ri->reqRingNumPages
| +        || ri->reqRingNumPages > PVSCSI_SETUP_RINGS_MAX_NUM_PAGES
| +        || !ri->cmpRingNumPages
| +        || ri->cmpRingNumPages > PVSCSI_SETUP_RINGS_MAX_NUM_PAGES) {
|          return -1;
|      }

Please see patch v2
  -> https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04267.html

Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F