]> git.ipfire.org Git - thirdparty/qemu.git/commit
usb: check RNDIS message length
authorPrasad J Pandit <pjp@fedoraproject.org>
Tue, 16 Feb 2016 18:53:40 +0000 (00:23 +0530)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Tue, 22 Mar 2016 22:40:52 +0000 (17:40 -0500)
commit9bddb45dbc010cd8ee4d48bd501fa5d18dcec00c
tree4a4904d3314214aac7aa1f1164354db5310d9ce8
parente3a2cdfcb5e282139217924044ec5af00c7f8eed
usb: check RNDIS message length

When processing remote NDIS control message packets, the USB Net
device emulator uses a fixed length(4096) data buffer. The incoming
packet length could exceed this limit. Add a check to avoid it.

Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 1455648821-17340-2-git-send-email-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
(cherry picked from commit 64c9bc181fc78275596649f591302d72df2d3071)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
hw/usb/core.c