From 8fa8d662a339a1d0951c58a4f35d8865d12d00cc Mon Sep 17 00:00:00 2001 From: Samuel Thibault Date: Thu, 26 May 2016 01:31:00 +0200 Subject: Fix buffer size passed to scsi_do_cmd * linux/src/drivers/scsi/eata_dma_proc.c (eata_proc_info): Increase cmd size to 12. * linux/src/drivers/scsi/sd.c (do_sd_request, sd_init_done): Likewise. * linux/src/drivers/scsi/sr.c (do_sr_request, sr_init_done): Likewise. * linux/src/drivers/scsi/sr_ioctl.c (sr_ioctl): Likewise with sr_cmd. --- linux/src/drivers/scsi/sd.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'linux/src/drivers/scsi/sd.c') diff --git a/linux/src/drivers/scsi/sd.c b/linux/src/drivers/scsi/sd.c index d5f1524a..eab64dda 100644 --- a/linux/src/drivers/scsi/sd.c +++ b/linux/src/drivers/scsi/sd.c @@ -577,7 +577,7 @@ static void do_sd_request (void) static void requeue_sd_request (Scsi_Cmnd * SCpnt) { int dev, devm, block, this_count; - unsigned char cmd[10]; + unsigned char cmd[12]; int bounce_size, contiguous; int max_sg; struct buffer_head * bh, *bhp; @@ -1028,7 +1028,7 @@ static void sd_init_done (Scsi_Cmnd * SCpnt) static int sd_init_onedisk(int i) { - unsigned char cmd[10]; + unsigned char cmd[12]; unsigned char *buffer; unsigned long spintime; int the_result, retries; -- cgit v1.2.3