]> Gentwo Git Trees - linux/.git/commit
scsi: sd: Fix VPD page 0xb7 length check
authorjackysliu <1972843537@qq.com>
Thu, 19 Jun 2025 04:03:02 +0000 (12:03 +0800)
committerMartin K. Petersen <martin.petersen@oracle.com>
Wed, 25 Jun 2025 01:05:42 +0000 (21:05 -0400)
commit8889676cd62161896f1d861ce294adc29c4f2cb5
tree6695db601f20768781162918244b35123a85bca3
parent00f452a1b084efbe8dcb60a29860527944a002a1
scsi: sd: Fix VPD page 0xb7 length check

sd_read_block_limits_ext() currently assumes that vpd->len excludes the
size of the page header. However, vpd->len describes the size of the entire
VPD page, therefore the sanity check is incorrect.

In practice this is not really a problem since we don't attach VPD
pages unless they actually report data trailing the header. But fix
the length check regardless.

This issue was identified by Wukong-Agent (formerly Tencent Woodpecker), a
code security AI agent, through static code analysis.

[mkp: rewrote patch description]

Signed-off-by: jackysliu <1972843537@qq.com>
Link: https://lore.kernel.org/r/tencent_ADA5210D1317EEB6CD7F3DE9FE9DA4591D05@qq.com
Fixes: 96b171d6dba6 ("scsi: core: Query the Block Limits Extension VPD page")
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/sd.c