diff options
| author | peter chang <dpf@google.com> | 2017-02-15 14:11:54 -0800 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-04-13 12:35:29 +0200 |
| commit | 4a95d8a8c79ca1addcd181ebfa83c1b7580aaa86 (patch) | |
| tree | 52740bf3ef6fca8f8e43a55e2953c6543b29c082 /kernel/capability.c | |
| parent | 745df73fa483f84a4f2b93bbe166ce9a39aa0003 (diff) | |
scsi: sg: check length passed to SG_NEXT_CMD_LEN
The user can control the size of the next command passed along, but the
value passed to the ioctl isn't checked against the usable max command
size.
Change-Id: I9e8eb8ca058c0103a22f5d99d77919432893aa4c
Cc: <stable@vger.kernel.org>
Signed-off-by: Peter Chang <dpf@google.com>
Acked-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'kernel/capability.c')
0 files changed, 0 insertions, 0 deletions