Searched hist:"2 b74b0a04d3e9f9f08ff026e5663dce88ff94e52" (Results 1 – 1 of 1) sorted by relevance
| /linux/drivers/usb/gadget/function/ |
| H A D | f_ncm.c | diff 2b74b0a04d3e9f9f08ff026e5663dce88ff94e52 Tue Aug 25 15:07:27 CEST 2020 Brooke Basile <brookebasile@gmail.com> USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
Some values extracted by ncm_unwrap_ntb() could possibly lead to several
different out of bounds reads of memory. Specifically the values passed
to netdev_alloc_skb_ip_align() need to be checked so that memory is not
overflowed.
Resolve this by applying bounds checking to a number of different
indexes and lengths of the structure parsing logic.
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Brooke Basile <brookebasile@gmail.com>
Acked-by: Felipe Balbi <balbi@kernel.org>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|