Dan, > "qd.id" comes directly from the copy_from_user() on the line before so > we should verify that it's within bounds.
Applied to 4.13/scsi-fixes. Thanks! -- Martin K. Petersen Oracle Linux Engineering
- [PATCH 1/2] scsi: aacraid: reading out of bounds Dan Carpenter
- [PATCH 2/2] scsi: aacraid: Off by one NUL terminat... Dan Carpenter
- Re: [PATCH 2/2] scsi: aacraid: Off by one NUL ... Bart Van Assche
- Re: [PATCH 2/2] scsi: aacraid: Off by one NUL ... Martin K. Petersen
- Re: [PATCH 2/2] scsi: aacraid: Off by one ... Dan Carpenter
- Re: [PATCH 2/2] scsi: aacraid: Off by ... Martin K. Petersen
- RE: [PATCH 2/2] scsi: aacraid: Off by one ... Dave Carroll
- Re: [PATCH 2/2] scsi: aacraid: Off by ... Martin K. Petersen
- RE: [PATCH 2/2] scsi: aacraid: Of... Dave Carroll
- Re: [PATCH 1/2] scsi: aacraid: reading out of boun... Martin K. Petersen
- RE: [PATCH 1/2] scsi: aacraid: reading out of ... Dave Carroll
