isci: fix smp response frame overrun
Due to a typo we currently copy way too much when copying over the response data, but since a request is likely backed by a full page allocation we don't corrupt live data. Signed-off-by: Dan Williams <dan.j.williams@intel.com>
This commit is contained in:
Родитель
ff60639dc9
Коммит
5edc33480c
|
@ -1694,7 +1694,7 @@ scic_sds_io_request_frame_handler(struct scic_sds_request *sci_req,
|
||||||
frame_index,
|
frame_index,
|
||||||
&smp_resp);
|
&smp_resp);
|
||||||
|
|
||||||
word_cnt = (sizeof(struct smp_req) - SMP_RESP_HDR_SZ) /
|
word_cnt = (sizeof(struct smp_resp) - SMP_RESP_HDR_SZ) /
|
||||||
sizeof(u32);
|
sizeof(u32);
|
||||||
|
|
||||||
sci_swab32_cpy(((u8 *) rsp_hdr) + SMP_RESP_HDR_SZ,
|
sci_swab32_cpy(((u8 *) rsp_hdr) + SMP_RESP_HDR_SZ,
|
||||||
|
|
Загрузка…
Ссылка в новой задаче