scsi: sr: Sanity check returned mode data
authorMartin K. Petersen <martin.petersen@oracle.com>
Fri, 17 Mar 2017 12:47:14 +0000 (08:47 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Apr 2017 07:31:21 +0000 (09:31 +0200)
commitc80c158bfe613d346d48803462bf55d8f35d228e
tree2f4c3911283a0158a826e9eef63684221a862a35
parent281e36cbaf4395bf036a8301d20906d0fcbdfc72
scsi: sr: Sanity check returned mode data

commit a00a7862513089f17209b732f230922f1942e0b9 upstream.

Kefeng Wang discovered that old versions of the QEMU CD driver would
return mangled mode data causing us to walk off the end of the buffer in
an attempt to parse it. Sanity check the returned mode sense data.

Reported-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Tested-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/scsi/sr.c