scsi: sd: Protect against READ(6) or WRITE(6) with zero block transfer length
authorBart Van Assche <bvanassche@acm.org>
Wed, 23 Jan 2019 19:12:37 +0000 (11:12 -0800)
committerMartin K. Petersen <martin.petersen@oracle.com>
Tue, 29 Jan 2019 05:49:23 +0000 (00:49 -0500)
commitdb5db4b91cabcf57f3efd98d92d24ab875cde8ae
treee9f7a50d213e0ff5022aa8080fea26c144290341
parent59abc8cc05856cb31d6e07a8e25f0d749d559233
scsi: sd: Protect against READ(6) or WRITE(6) with zero block transfer length

Since the READ(6) and WRITE(6) commands interpret a zero in the transfer
length field in the CDB as 256 logical blocks, avoid submitting such
commands.

Cc: Douglas Gilbert <dgilbert@interlog.com>
Cc: Hannes Reinecke <hare@suse.com>
Cc: Christoph Hellwig <hch@lst.de>
Reported-by: Douglas Gilbert <dgilbert@interlog.com>
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Reviewed-by: Douglas Gilbert <dgilbert@interlog.com>
Reviewed-by: Hannes Reinecke <hare@suse.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/sd.c