]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
zr364xx: enforce minimum size when reading header
authorAlyssa Milburn <amilburn@zall.org>
Sat, 1 Apr 2017 17:34:08 +0000 (14:34 -0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 May 2017 13:46:21 +0000 (15:46 +0200)
commitac6dedddbadc66774a7249904c6a562f236fd8ef
tree7e5de28fb4be98cdf158c2e7741c40d934de3693
parent20c98053a259118ec89c91af73630e2a21583815
zr364xx: enforce minimum size when reading header

commit ee0fe833d96793853335844b6d99fb76bd12cbeb upstream.

This code copies actual_length-128 bytes from the header, which will
underflow if the received buffer is too small.

Signed-off-by: Alyssa Milburn <amilburn@zall.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/media/usb/zr364xx/zr364xx.c