diff options
| author | Jens Axboe <[email protected]> | 2018-05-21 18:21:14 +0000 |
|---|---|---|
| committer | Jens Axboe <[email protected]> | 2018-05-21 18:21:14 +0000 |
| commit | f7068114d45ec55996b9040e98111afa56e010fe (patch) | |
| tree | 32c53bcae79c32537ffe622d7654d69f60ebd6f7 /lib/bitmap.c | |
| parent | bcache: return 0 from bch_debug_init() if CONFIG_DEBUG_FS=n (diff) | |
| download | kernel-f7068114d45ec55996b9040e98111afa56e010fe.tar.gz kernel-f7068114d45ec55996b9040e98111afa56e010fe.zip | |
sr: pass down correctly sized SCSI sense buffer
We're casting the CDROM layer request_sense to the SCSI sense
buffer, but the former is 64 bytes and the latter is 96 bytes.
As we generally allocate these on the stack, we end up blowing
up the stack.
Fix this by wrapping the scsi_execute() call with a properly
sized sense buffer, and copying back the bits for the CDROM
layer.
Cc: [email protected]
Reported-by: Piotr Gabriel Kosinski <[email protected]>
Reported-by: Daniel Shapira <[email protected]>
Tested-by: Kees Cook <[email protected]>
Fixes: 82ed4db499b8 ("block: split scsi_request out of struct request")
Signed-off-by: Jens Axboe <[email protected]>
Diffstat (limited to 'lib/bitmap.c')
0 files changed, 0 insertions, 0 deletions