Re: [PATCH] scsi: libfc: Prevent integer overflow in fc_fcp_recv_data()

[Martin K. Petersen]

Dan,

> The "offset" comes from the skb->data that we received. Here the code
> is verifying that "offset + len" is within bounds however it does not
> take integer overflows into account. Use size_add() to be safe.

Applied to 6.18/scsi-staging, thanks!

-- 
Martin K. Petersen