Al Viro 128394eff3 sg_write()/bsg_write() is not fit to be called under KERNEL_DS ...

Both damn things interpret userland pointers embedded into the payload;
worse, they are actually traversing those.  Leaving aside the bad
API design, this is very much _not_ safe to call with KERNEL_DS.
Bail out early if that happens.

Cc: stable@vger.kernel.org
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

2016-12-22 23:03:42 -05:00

72 KiB

Raw Blame History

View Raw