diff options
| author | Brooke Basile <brookebasile@gmail.com> | 2020-08-25 09:07:27 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-08-25 16:02:32 +0200 |
| commit | 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 (patch) | |
| tree | eac7aa936da93bc17bc5d0a7643419ef62a09cbe /drivers/usb/phy | |
| parent | b1cd1b65afba95971fa457dfdb2c941c60d38c5b (diff) | |
USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
Some values extracted by ncm_unwrap_ntb() could possibly lead to several
different out of bounds reads of memory. Specifically the values passed
to netdev_alloc_skb_ip_align() need to be checked so that memory is not
overflowed.
Resolve this by applying bounds checking to a number of different
indexes and lengths of the structure parsing logic.
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Brooke Basile <brookebasile@gmail.com>
Acked-by: Felipe Balbi <balbi@kernel.org>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/phy')
0 files changed, 0 insertions, 0 deletions