OSDN Git Service

scsi: sr: Sanity check returned mode data
authorMartin K. Petersen <martin.petersen@oracle.com>
Fri, 17 Mar 2017 12:47:14 +0000 (08:47 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Apr 2017 07:30:05 +0000 (09:30 +0200)
commit925adae6664c0b9f5193876e9aeb2640a7e977d5
tree99ebf2e43b8d63b048c20cb627923b1db3dbef96
parent1e1de2e841e141991250d7c0ac79c5877a43b6a4
scsi: sr: Sanity check returned mode data

commit a00a7862513089f17209b732f230922f1942e0b9 upstream.

Kefeng Wang discovered that old versions of the QEMU CD driver would
return mangled mode data causing us to walk off the end of the buffer in
an attempt to parse it. Sanity check the returned mode sense data.

Reported-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Tested-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/scsi/sr.c