Re: [PATCH] scsi: sg: off by one in sg_ioctl()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
Subject: Re: [PATCH] scsi: sg: off by one in sg_ioctl()
From: "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>
Date: Tue, 22 Aug 2017 22:24:14 -0400
Cc: Doug Gilbert <dgilbert@xxxxxxxxxxxx>, Hannes Reinecke <hare@xxxxxxx>, "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxxxx>, "Martin K. Petersen" <martin.petersen@xxxxxxxxxx>, linux-scsi@xxxxxxxxxxxxxxx, kernel-janitors@xxxxxxxxxxxxxxx
In-reply-to: <20170817070954.d4gg7hqgg2qjf6d3@mwanda> (Dan Carpenter's message of "Thu, 17 Aug 2017 10:09:54 +0300")
Organization: Oracle Corporation
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux)

Dan,

> If "val" is SG_MAX_QUEUE then we are one element beyond the end of the
> "rinfo" array so the > should be >=.

Applied to 4.13/scsi-fixes. Thanks!

-- 
Martin K. Petersen	Oracle Linux Engineering

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

References:
- [PATCH] scsi: sg: off by one in sg_ioctl()
  - From: Dan Carpenter

Prev by Date: Re: [PATCH] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
Next by Date: Re: possible circular locking dependency detected [was: linux-next: Tree for Aug 22]
Previous by thread: Re: [PATCH] scsi: sg: off by one in sg_ioctl()
Next by thread: smp-induced oops/NULL pointer dereference in mpt3sas, from kernel >= 4.11
Index(es):
- Date
- Thread

[Index of Archives] [SCSI Target Devel] [Linux SCSI Target Infrastructure] [Kernel Newbies] [IDE] [Security] [Git] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux ATA RAID] [Linux IIO] [Samba] [Device Mapper]

Powered by Linux