Blob Blame History Raw
From e9c9117b7a84866366691110496984fc651e3e43 Mon Sep 17 00:00:00 2001
From: Chris Leech <cleech@redhat.com>
Date: Fri, 17 Jan 2020 13:42:10 -0800
Subject: [PATCH 1/1] Revert "Out-of-bounds read: Overrunning array of 8 2-byte
 elements"

It's been reported that this breaks IPv6 discovery with qedi controllers

This reverts commit af48f0d68db48cd492d0e27e046fc011be236fd3.
---
 iscsiuio/src/uip/ipv6.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/iscsiuio/src/uip/ipv6.c b/iscsiuio/src/uip/ipv6.c
index 5710199..05efa73 100644
--- a/iscsiuio/src/uip/ipv6.c
+++ b/iscsiuio/src/uip/ipv6.c
@@ -521,7 +521,7 @@ static void ipv6_insert_protocol_chksum(struct ipv6_hdr *ipv6)
 	sum = 0;
 	ptr = (u16_t *)&ipv6->ipv6_src;
 
-	for (i = 0; i < sizeof(struct ipv6_addr); i += 2) {
+	for (i = 0; i < sizeof(struct ipv6_addr); i++) {
 		sum += HOST_TO_NET16(*ptr);
 		ptr++;
 	}
-- 
2.21.1