]> git.ipfire.org Git - thirdparty/qemu.git/commit
esp: ensure that async_len is reset to 0 during esp_hard_reset()
authorMark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
Thu, 18 Nov 2021 10:03:26 +0000 (10:03 +0000)
committerPaolo Bonzini <pbonzini@redhat.com>
Fri, 19 Nov 2021 09:14:30 +0000 (10:14 +0100)
commit3f26c9757726918015d351fafc436b2888689985
tree01bdfc82371c3ec7e62a1b5e0bbb5f5ceb3eb87f
parent0cc4965049d9792ffede8fc371b58193d6ecbb02
esp: ensure that async_len is reset to 0 during esp_hard_reset()

If a reset command is sent after data has been transferred into the SCSI buffer
ensure that async_len is reset to 0. Otherwise a subsequent TI command assumes
the SCSI buffer contains data to be transferred to the device causing it to
dereference the stale async_buf pointer.

Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/724
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-Id: <20211118100327.29061-2-mark.cave-ayland@ilande.co.uk>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
hw/scsi/esp.c