]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7e5315a) | patch
scsi: sg: check length passed to SG_NEXT_CMD_LEN
authorpeter chang <dpf@google.com>
Wed, 15 Feb 2017 22:11:54 +0000 (14:11 -0800)
committerMartin K. Petersen <martin.petersen@oracle.com>
Thu, 16 Mar 2017 23:46:33 +0000 (19:46 -0400)
commit93799331cc3ed7eba7dbe85b2042c5fef1570f6c
tree4207379ccff4dd625ff04a3cbc44fddfe819fac9tree | snapshot
parent7e5315ab9e977a441d856490774365e6f74ca209commit | diff
scsi: sg: check length passed to SG_NEXT_CMD_LEN

The user can control the size of the next command passed along, but the
value passed to the ioctl isn't checked against the usable max command
size.

Cc: <stable@vger.kernel.org>
Signed-off-by: Peter Chang <dpf@google.com>
Acked-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/sg.c diff | blob | history
Linux Kernel Source Tree.