Эх сурвалжийг харах

target: fix buffer offset in core_scsi3_pri_read_full_status

When at least two initiators register pr on the same LUN,
the target returns the exception data due to buffer offset
error, therefore the initiator executes command 'sg_persist -s'
may cause the initiator to appear segfault error.

This fixes a regression originally introduced by:

  commit a85d667e58bddf73be84d1981b41eaac985ed216
  Author: Bart Van Assche <bart.vanassche@sandisk.com>
  Date:   Tue May 23 16:48:27 2017 -0700

      target: Use {get,put}_unaligned_be*() instead of open coding these functions

Signed-off-by: tangwenji <tang.wenji@zte.com.cn>
Cc: stable@vger.kernel.org # 4.13+
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
tangwenji 8 жил өмнө
parent
commit
c58a252beb

+ 1 - 0
drivers/target/target_core_pr.c

@@ -4011,6 +4011,7 @@ core_scsi3_pri_read_full_status(struct se_cmd *cmd)
 		 * Set the ADDITIONAL DESCRIPTOR LENGTH
 		 * Set the ADDITIONAL DESCRIPTOR LENGTH
 		 */
 		 */
 		put_unaligned_be32(desc_len, &buf[off]);
 		put_unaligned_be32(desc_len, &buf[off]);
+		off += 4;
 		/*
 		/*
 		 * Size of full desctipor header minus TransportID
 		 * Size of full desctipor header minus TransportID
 		 * containing $FABRIC_MOD specific) initiator device/port
 		 * containing $FABRIC_MOD specific) initiator device/port