scsi: iscsi: Verify lengths on passthrough PDUs
authorChris Leech <cleech@redhat.com>
Wed, 24 Feb 2021 05:39:01 +0000 (21:39 -0800)
committerMartin K. Petersen <martin.petersen@oracle.com>
Fri, 5 Mar 2021 01:09:51 +0000 (20:09 -0500)
commitf9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5
tree780979f5262e57682093d004e22fffff407469c7
parentec98ea7070e94cc25a422ec97d1421e28d97b7ee
scsi: iscsi: Verify lengths on passthrough PDUs

Open-iSCSI sends passthrough PDUs over netlink, but the kernel should be
verifying that the provided PDU header and data lengths fall within the
netlink message to prevent accessing beyond that in memory.

Cc: stable@vger.kernel.org
Reported-by: Adam Nichols <adam@grimm-co.com>
Reviewed-by: Lee Duncan <lduncan@suse.com>
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Chris Leech <cleech@redhat.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/scsi_transport_iscsi.c