projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6eae873) | patch
scsi: sg: check length passed to SG_NEXT_CMD_LEN
authorpeter chang <dpf@google.com>
Wed, 15 Feb 2017 22:11:54 +0000 (14:11 -0800)
committerBen Hutchings <ben@decadent.org.uk>
Thu, 30 Mar 2017 01:16:33 +0000 (01:16 +0000)
commit1c4717120bf373d5f6d2b32fdd2c7734de832b85
tree4dc8a8d362d72afad32ad9251d3b87f56717e674tree | snapshot
parent6eae873c469fc9876495be04c3d9436cb1d8983fcommit | diff
scsi: sg: check length passed to SG_NEXT_CMD_LEN

The user can control the size of the next command passed along, but the
value passed to the ioctl isn't checked against the usable max command
size.

Cc: <stable@vger.kernel.org>
Signed-off-by: Peter Chang <dpf@google.com>
Acked-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name scsi-sg-check-length-passed-to-sg_next_cmd_len.patch
drivers/scsi/sg.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.