Searched hist:"18 c9a99bce2a57dfd7e881658703b5d7469cc7b9" (Results 1 – 1 of 1) sorted by relevance
| /linux/drivers/ata/ |
| H A D | libata-zpodd.c | diff 18c9a99bce2a57dfd7e881658703b5d7469cc7b9 Tue May 29 11:13:24 CEST 2018 Dan Carpenter <dan.carpenter@oracle.com> libata: zpodd: small read overflow in eject_tray()
We read from the cdb[] buffer in ata_exec_internal_sg(). It has to be
ATAPI_CDB_LEN (16) bytes long, but this buffer is only 12 bytes.
Fixes: 213342053db5 ("libata: handle power transition of ODD")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
Cc: stable@vger.kernel.org
|