summaryrefslogtreecommitdiff
path: root/sys/dev/firewire
diff options
context:
space:
mode:
authorAlexander Motin <mav@FreeBSD.org>2017-02-28 05:17:50 +0000
committerAlexander Motin <mav@FreeBSD.org>2017-02-28 05:17:50 +0000
commit0e672f795efc0afb318ca41777402eee798427e3 (patch)
treeb7460560c7acf9badf5f6b1a69a58f5522784384 /sys/dev/firewire
parentefe3b0de1438e7a8473d92f2be57072394559e3c (diff)
Notes
Diffstat (limited to 'sys/dev/firewire')
-rw-r--r--sys/dev/firewire/sbp.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/sys/dev/firewire/sbp.c b/sys/dev/firewire/sbp.c
index bc0b59fe2fd1..8953be7e11f4 100644
--- a/sys/dev/firewire/sbp.c
+++ b/sys/dev/firewire/sbp.c
@@ -2367,6 +2367,11 @@ END_DEBUG
xpt_done(ccb);
return;
}
+ if (csio->cdb_len > sizeof(ocb->orb) - 5 * sizeof(uint32_t)) {
+ ccb->ccb_h.status = CAM_REQ_INVALID;
+ xpt_done(ccb);
+ return;
+ }
#if 0
/* if we are in probe stage, pass only probe commands */
if (sdev->status == SBP_DEV_PROBE) {