]> git.baikalelectronics.ru Git - kernel.git/commit
CDC-NCM: handle incomplete transfer of MTU
authorOliver Neukum <oneukum@suse.com>
Thu, 7 Nov 2019 08:48:01 +0000 (09:48 +0100)
committerDavid S. Miller <davem@davemloft.net>
Thu, 7 Nov 2019 23:27:06 +0000 (15:27 -0800)
commit539e23abcf1b66b63843eaed564591522c364a53
tree412b95932374b9675b47915972fef54c0907d685
parent477f355068aeedc1ef280cdfde0a9ca85606d3a8
CDC-NCM: handle incomplete transfer of MTU

A malicious device may give half an answer when asked
for its MTU. The driver will proceed after this with
a garbage MTU. Anything but a complete answer must be treated
as an error.

V2: used sizeof as request by Alexander

Reported-and-tested-by: syzbot+0631d878823ce2411636@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/usb/cdc_ncm.c