From: Paolo Bonzini <pbonzini@redhat.com>
Date: Thu, 9 Aug 2012 11:34:53 +0000 (+0200)
Subject: scsi-disk: improve out-of-range LBA detection for WRITE SAME
X-Git-Tag: v1.2.0-rc0~36^2~1
X-Git-Url: https://git.proxmox.com/?a=commitdiff_plain;h=a084a703df9ab896c9d30ac479e1388e5e4cafb0;p=qemu.git

scsi-disk: improve out-of-range LBA detection for WRITE SAME

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
---

diff --git a/hw/scsi-disk.c b/hw/scsi-disk.c
index 9af9d18fa..584aec13f 100644
--- a/hw/scsi-disk.c
+++ b/hw/scsi-disk.c
@@ -1712,7 +1712,8 @@ static int32_t scsi_disk_emulate_command(SCSIRequest *req, uint8_t *buf)
             scsi_check_condition(r, SENSE_CODE(WRITE_PROTECTED));
             return 0;
         }
-        if (r->req.cmd.lba > s->qdev.max_lba) {
+        if (r->req.cmd.lba > r->req.cmd.lba + nb_sectors ||
+            r->req.cmd.lba + nb_sectors - 1 > s->qdev.max_lba) {
             goto illegal_lba;
         }