Files
linux/drivers
Dan Carpenter 9de4ee4054 cdrom: information leak in cdrom_ioctl_media_changed()
This cast is wrong.  "cdi->capacity" is an int and "arg" is an unsigned
long.  The way the check is written now, if one of the high 32 bits is
set then we could read outside the info->slots[] array.

This bug is pretty old and it predates git.

Reviewed-by: Christoph Hellwig <hch@lst.de>
Cc: stable@vger.kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
2018-04-18 08:21:32 -06:00
..
2018-03-27 09:51:22 +02:00
2018-03-19 14:18:22 -05:00
2018-03-19 14:20:24 -05:00
2018-04-11 10:28:39 -07:00
2018-03-06 09:57:17 -08:00
2018-03-29 13:38:10 +03:00