⬢ DragonFlyBSD Kernel Audit
DF-3920 / fix.diff
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
--- a/sys/dev/raid/hptmv/entry.c
+++ b/sys/dev/raid/hptmv/entry.c
@@ -2774,6 +2774,11 @@
 			PCommand pCmd = AllocateCommand(_VBUS_P0);
 			HPT_ASSERT(pCmd);
 
+			if (csio->cdb_len > sizeof(Cdb)) {
+				ccb->ccb_h.status = CAM_REQ_INVALID;
+				xpt_done(ccb);
+				goto Command_Complished;
+			}
 			CdbLength = csio->cdb_len;
 			if ((ccb->ccb_h.flags & CAM_CDB_POINTER) != 0)
 			{