| commit | 8bfb596b111029d1e3f2f822b5f4489ccbc3b529 | [log] [tgz] |
|---|---|---|
| author | peter chang <dpf@google.com> | Wed Feb 15 14:11:54 2017 -0800 |
| committer | chrmhoffmann <chrmhoffmann@gmail.com> | Sun Aug 06 12:23:40 2017 +0200 |
| tree | 543c739bdc088cfd8573e608dadb4a4ec36ddaa6 | |
| parent | 24a6d2e239a65e97a51e20d76593dcf10923ca50 [diff] |
scsi: sg: check length passed to SG_NEXT_CMD_LEN The user can control the size of the next command passed along, but the value passed to the ioctl isn't checked against the usable max command size. Change-Id: I9e8eb8ca058c0103a22f5d99d77919432893aa4c Cc: <stable@vger.kernel.org> Signed-off-by: Peter Chang <dpf@google.com> Acked-by: Douglas Gilbert <dgilbert@interlog.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>