scsi: sr: Sanity check returned mode data
authorMartin K. Petersen <martin.petersen@oracle.com>
Fri, 17 Mar 2017 12:47:14 +0000 (08:47 -0400)
committerDanny Wood <danwood76@gmail.com>
Tue, 29 Jan 2019 13:17:03 +0000 (13:17 +0000)
commitced30f69901ea2500bf65f5cccb7f34f8ef830a6
treee6ba80697585e83a89fd367dd7f2355bfe9124c3
parent92e43791f052edafda1d63171166760e64052c0f
scsi: sr: Sanity check returned mode data

commit a00a7862513089f17209b732f230922f1942e0b9 upstream.

Kefeng Wang discovered that old versions of the QEMU CD driver would
return mangled mode data causing us to walk off the end of the buffer in
an attempt to parse it. Sanity check the returned mode sense data.

Reported-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Tested-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
drivers/scsi/sr.c