projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 645b8ef) | patch
scsi: sg: check length passed to SG_NEXT_CMD_LEN
authorpeter chang <dpf@google.com>
Wed, 15 Feb 2017 22:11:54 +0000 (14:11 -0800)
committerMartin K. Petersen <martin.petersen@oracle.com>
Thu, 16 Mar 2017 23:46:33 +0000 (19:46 -0400)
commitbf33f87dd04c371ea33feb821b60d63d754e3124
tree4207379ccff4dd625ff04a3cbc44fddfe819fac9tree | snapshot
parent645b8ef5943f95b74240568105ce2be21c6640b4commit | diff
scsi: sg: check length passed to SG_NEXT_CMD_LEN

The user can control the size of the next command passed along, but the
value passed to the ioctl isn't checked against the usable max command
size.

Cc: <stable@vger.kernel.org>
Signed-off-by: Peter Chang <dpf@google.com>
Acked-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/sg.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git