https://github.com/torvalds/linux
Revision ce042c183bcb94eb2919e8036473a1fc203420f9 authored by Dan Carpenter on 20 June 2018, 10:41:51 UTC, committed by Jens Axboe on 20 June 2018, 18:04:06 UTC
resp->num is the number of tokens in resp->tok[].  It gets set in
response_parse().  So if n == resp->num then we're reading beyond the
end of the data.

Fixes: 455a7b238cd6 ("block: Add Sed-opal library")
Reviewed-by: Scott Bauer <scott.bauer@intel.com>
Tested-by: Scott Bauer <scott.bauer@intel.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
1 parent a1e7918
History
Tip revision: ce042c183bcb94eb2919e8036473a1fc203420f9 authored by Dan Carpenter on 20 June 2018, 10:41:51 UTC
block: sed-opal: Fix a couple off by one bugs
Tip revision: ce042c1
File Mode Size
.gitignore -rw-r--r-- 44 bytes
Kconfig -rw-r--r-- 3.4 KB
Makefile -rw-r--r-- 4.1 KB
blacklist.c -rw-r--r-- 4.0 KB
blacklist.h -rw-r--r-- 83 bytes
blacklist_hashes.c -rw-r--r-- 166 bytes
blacklist_nohashes.c -rw-r--r-- 122 bytes
system_certificates.S -rw-r--r-- 956 bytes
system_keyring.c -rw-r--r-- 7.5 KB

back to top