diff options
author | Kees Cook <keescook@chromium.org> | 2021-06-16 14:24:28 -0700 |
---|---|---|
committer | Martin K. Petersen <martin.petersen@oracle.com> | 2021-06-18 23:26:33 -0400 |
commit | 86a6a0bdbe2beb4cc7bc80eccd835b62a1f0c364 (patch) | |
tree | 29b98b480005668357cfac89dd9798d6eb7cb211 /samples/v4l | |
parent | 4ab293c2809efa1499c3290ff007d98a9ee2fab2 (diff) |
scsi: arcmsr: Avoid over-read of sense buffer
In preparation for FORTIFY_SOURCE performing compile-time and run-time
field bounds checking for memcpy(), memmove(), and memset(), avoid
intentionally reading across neighboring array fields.
pcmd->sense_buffer is 96 bytes, and was being manually zero-filled.
However, struct SENSE_DATA is 18 bytes, with ccb->arcmsr_cdb.SenseData only
being 15 bytes, resulting in a 3 byte over-read.
Copy only the contents of ccb->arcmsr_cdb.SenseData and zero fill the
remainder, avoiding potential over-reads.
Link: https://lore.kernel.org/r/20210616212428.1726958-1-keescook@chromium.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'samples/v4l')
0 files changed, 0 insertions, 0 deletions