]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 025ec40) | patch
CDC-NCM: handle incomplete transfer of MTU
authorOliver Neukum <oneukum@suse.com>
Thu, 7 Nov 2019 08:48:01 +0000 (09:48 +0100)
committerDavid S. Miller <davem@davemloft.net>
Thu, 7 Nov 2019 23:27:06 +0000 (15:27 -0800)
commit332f989a3b0041b810836c5c3747e59aad7e9d0b
tree412b95932374b9675b47915972fef54c0907d685tree
parent025ec40b81d785a98f76b8bdb509ac10773b4f12commit | diff
CDC-NCM: handle incomplete transfer of MTU

A malicious device may give half an answer when asked
for its MTU. The driver will proceed after this with
a garbage MTU. Anything but a complete answer must be treated
as an error.

V2: used sizeof as request by Alexander

Reported-and-tested-by: syzbot+0631d878823ce2411636@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/usb/cdc_ncm.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git