Re: [PATCH] fix: lpfc_send_rscn_event sends bigger buffer size

On 08/20/2015 01:35 PM, Ales Novak wrote: lpfc_send_rscn_event() allocates data for sizeof(struct lpfc_rscn_event_header) + payload_len, but claims that the data has size of sizeof(struct lpfc_els_event_header) + payload_len. That leads to buffer overruns. Signed-off-by: Ales Novak

[PATCH] fix: lpfc_send_rscn_event sends bigger buffer size

lpfc_send_rscn_event() allocates data for sizeof(struct lpfc_rscn_event_header) + payload_len, but claims that the data has size of sizeof(struct lpfc_els_event_header) + payload_len. That leads to buffer overruns. Signed-off-by: Ales Novak alno...@suse.cz --- drivers/scsi/lpfc/lpfc_els.c | 2 +-