On 07/27/2017 09:11 AM, Johannes Thumshirn wrote: > Don't make any assumptions on the sg_io_hdr_t::dxfer_direction or the > sg_io_hdr_t::dxferp in order to determine if it is a valid request. The > only way we can check for bad requests is by checking if the length exceeds > 256M. > > Signed-off-by: Johannes Thumshirn <jthumsh...@suse.de> > Fixes: 28676d869bbb (scsi: sg: check for valid direction before starting the > request) > Reported-by: Jason L Tibbitts III <ti...@math.uh.edu> > Tested-by: Jason L Tibbitts III <ti...@math.uh.edu> > Suggested-by: Doug Gilbert <dgilb...@interlog.com> > Cc: Doug Gilbert <dgilb...@interlog.com> > Cc: <sta...@vger.kernel.org> > --- > drivers/scsi/sg.c | 31 +------------------------------ > 1 file changed, 1 insertion(+), 30 deletions(-) > Reviewed-by: Hannes Reinecke <h...@suse.com>
Cheers, Hannes -- Dr. Hannes Reinecke Teamlead Storage & Networking h...@suse.de +49 911 74053 688 SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nürnberg GF: F. Imendörffer, J. Smithard, J. Guild, D. Upmanyu, G. Norton HRB 21284 (AG Nürnberg)
