mbox series

[0/2] use unsigned type for MegasasState fields

Message ID 20200507105718.1319187-1-ppandit@redhat.com
Headers show
Series use unsigned type for MegasasState fields | expand

Message

Prasad Pandit May 7, 2020, 10:57 a.m. UTC 
From: Prasad J Pandit <pjp@fedoraproject.org>

Hello,

* This series fixes an OOB access issue which may occur when a guest user
  sets 's->reply_queue_head' field to a negative(or large positive) value,
  via 'struct mfi_init_qinfo' object in megasas_init_firmware().

* Second patch updates other numeric fields of MegasasState to unsigned type.

Thank you.
---
Prasad J Pandit (2):
  megasas: use unsigned type for reply_queue_head
  megasas: use unsigned type for positive numeric fields

 hw/scsi/megasas.c | 40 ++++++++++++++++++++--------------------
 1 file changed, 20 insertions(+), 20 deletions(-)