Scott Bauer 73b2e7073b cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status ... commit 8f3fafc9c2 upstream. Like d88b6d04: "cdrom: information leak in cdrom_ioctl_media_changed()" There is another cast from unsigned long to int which causes a bounds check to fail with specially crafted input. The value is then used as an index in the slot array in cdrom_slot_status(). Signed-off-by: Scott Bauer <scott.bauer@intel.com> Signed-off-by: Scott Bauer <sbauer@plzdonthack.me> Cc: stable@vger.kernel.org Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-09-05 09:26:42 +02:00
..
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
cdrom.c	cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status	2018-09-05 09:26:42 +02:00
gdrom.c	cdrom: do not call check_disk_change() inside cdrom_open()	2018-05-30 07:52:34 +02:00