From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:41253) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b3MEc-0002OX-Vt for qemu-devel@nongnu.org; Thu, 19 May 2016 07:35:28 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b3MEb-0008Sl-2h for qemu-devel@nongnu.org; Thu, 19 May 2016 07:35:21 -0400 Sender: Paolo Bonzini References: <1463654371-11169-1-git-send-email-ppandit@redhat.com> From: Paolo Bonzini Message-ID: <3e99e0e1-a48c-22ae-01f8-dfc7e542121c@redhat.com> Date: Thu, 19 May 2016 13:35:12 +0200 MIME-Version: 1.0 In-Reply-To: <1463654371-11169-1-git-send-email-ppandit@redhat.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH 0/2] Qemu: scsi: esp: check command buffer input length List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: P J P , Qemu Developers Cc: Li Qiang , Prasad J Pandit , qemu-stable On 19/05/2016 12:39, P J P wrote: > From: Prasad J Pandit > > Hello, > > The ESP 53C9X Fast SCSI Controller(FSC) comes with an internal 16-byte > FIFO buffer. It is used to handle command and data transfer between > controller and the bus. Couple of OOB write access issues were found > and reported in its emulation by Mr Li Qiang of 360.cn Inc. > > Please see below are the proposed patches to fix these issues. > > Thank you. Thanks, queued for 2.7 and add Cc: qemu-stable@nongnu.org. Paolo