| commit | bf33f87dd04c371ea33feb821b60d63d754e3124 | [log] [tgz] |
|---|---|---|
| author | peter chang <dpf@google.com> | Wed Feb 15 14:11:54 2017 -0800 |
| committer | Martin K. Petersen <martin.petersen@oracle.com> | Thu Mar 16 19:46:33 2017 -0400 |
| tree | 4207379ccff4dd625ff04a3cbc44fddfe819fac9 | |
| parent | 645b8ef5943f95b74240568105ce2be21c6640b4 [diff] |
scsi: sg: check length passed to SG_NEXT_CMD_LEN The user can control the size of the next command passed along, but the value passed to the ioctl isn't checked against the usable max command size. Cc: <stable@vger.kernel.org> Signed-off-by: Peter Chang <dpf@google.com> Acked-by: Douglas Gilbert <dgilbert@interlog.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>