Changeset 87166 in vbox

Timestamp:

Jan 4, 2021 1:23:10 PM (4 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

142086

Message:

Devices/DevBusLogic: Stricter check, bugref:9897

File:

• trunk/src/VBox/Devices/Storage/DevBusLogic.cpp (modified) (2 diffs)

trunk/src/VBox/Devices/Storage/DevBusLogic.cpp

@@ -1985 +1985 @@
             {
                 /* First pass - set the number of following parameter bytes. */
-                pThis->cbCommandParametersLeft = pThis->aCommandBuffer[0];
+                pThis->cbCommandParametersLeft = RT_MIN(pThis->aCommandBuffer[0], sizeof(pThis->aCommandBuffer) - 1);
                 Log(("Set HA options: %u bytes follow\n", pThis->cbCommandParametersLeft));
             }
@@ -2004 +2004 @@
             {
                 /* First pass - set the number of following CDB bytes. */
-                pThis->cbCommandParametersLeft = pThis->aCommandBuffer[11];
+                pThis->cbCommandParametersLeft = RT_MIN(pThis->aCommandBuffer[11], sizeof(pThis->aCommandBuffer) - 12);
                 Log(("Execute SCSI cmd: %u more bytes follow\n", pThis->cbCommandParametersLeft));
             }