]> git.baikalelectronics.ru Git - kernel.git/commit
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer
authorShuah Khan <shuahkh@osg.samsung.com>
Sat, 23 Dec 2017 02:23:47 +0000 (19:23 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Jan 2018 16:07:27 +0000 (17:07 +0100)
commit9b577f0fbe7312b73cce4bf0809a98499152604b
treea0531af0618c2093491d0bbe4d26ffd6b6efb0ce
parent92ca7eaf2bdfd85b51aac0d537866d4d3828917b
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer

v_send_ret_submit() handles urb with a null transfer_buffer, when it
replays a packet with potential malicious data that could contain a
null buffer.

Add a check for the condition when actual_length > 0 and transfer_buffer
is null.

Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/usbip/vudc_tx.c