Re: [PATCH] cdrom: information leak in cdrom_ioctl_media_changed()

[Jens Axboe <axboe@xxxxxxxxx>]

On 4/18/18 3:51 AM, Dan Carpenter wrote:
> This cast is wrong.  "cdi->capacity" is an int and "arg" is an unsigned
> long.  The way the check is written now, if one of the high 32 bits is
> set then we could read outside the info->slots[] array.
> 
> This bug is pretty old and it predates git.

Thanks Dan, applied.

-- 
Jens Axboe