diff options
| author | peter chang <dpf@google.com> | 2017-02-16 01:11:54 +0300 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2017-03-17 02:46:33 +0300 |
| commit | bf33f87dd04c371ea33feb821b60d63d754e3124 (patch) | |
| tree | 4207379ccff4dd625ff04a3cbc44fddfe819fac9 /drivers/scsi/device_handler | |
| parent | 645b8ef5943f95b74240568105ce2be21c6640b4 (diff) | |
| download | linux-bf33f87dd04c371ea33feb821b60d63d754e3124.tar.xz | |
scsi: sg: check length passed to SG_NEXT_CMD_LEN
The user can control the size of the next command passed along, but the
value passed to the ioctl isn't checked against the usable max command
size.
Cc: <stable@vger.kernel.org>
Signed-off-by: Peter Chang <dpf@google.com>
Acked-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'drivers/scsi/device_handler')
0 files changed, 0 insertions, 0 deletions