From 28e3e06ebc2050d7d41496ec17e2850c2d9d8699 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=B8ren=20Schmidt?= <sos@FreeBSD.org>
Date: Wed, 30 May 2001 08:06:57 +0000
Subject: [PATCH] Dont try to play tracks outside whats on the media.

PR 26647
---
 sys/dev/ata/atapi-cd.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sys/dev/ata/atapi-cd.c b/sys/dev/ata/atapi-cd.c
index 3d4e7f511e1..8561da4bfdc 100644
--- a/sys/dev/ata/atapi-cd.c
+++ b/sys/dev/ata/atapi-cd.c
@@ -798,7 +798,8 @@ acdioctl(dev_t dev, u_long cmd, caddr_t addr, int flags, struct proc *p)
 		args->end_track = cdp->toc.hdr.ending_track + 1;
 	    t1 = args->start_track - cdp->toc.hdr.starting_track;
 	    t2 = args->end_track - cdp->toc.hdr.starting_track;
-	    if (t1 < 0 || t2 < 0) {
+	    if (t1 < 0 || t2 < 0 ||
+		t1 > (cdp->toc.hdr.ending_track-cdp->toc.hdr.starting_track)) {
 		error = EINVAL;
 		break;
 	    }