--- a/sys/dev/disk/nata/atapi-cd.c 2026-10-15 23:32:04.877306882 +0000 +++ b/sys/dev/disk/nata/atapi-cd.c 2026-10-15 23:32:19.813116281 +0000 @@ -721,6 +721,10 @@ break; case CDRIOCSETBLOCKSIZE: + if (*(int *)ap->a_data <= 0) { + error = EINVAL; + break; + } cdp->block_size = *(int *)ap->a_data; acd_set_ioparm(dev); break;