OSDN Git Service

ax88172a: fix information leak on short answers
authorOliver Neukum <oneukum@suse.com>
Thu, 14 Nov 2019 10:16:01 +0000 (11:16 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 22 Nov 2019 13:43:18 +0000 (14:43 +0100)
commit175833f570c700f3b61a4bc1d8d8fc04bb8bfa0a
treea655f2ae379c6dcfc0f07e84e2524a4ec231151e
parente6ecf243ac295c728f7db38bd0b25152fce6fc5a
ax88172a: fix information leak on short answers

[ Upstream commit a9a51bd727d141a67b589f375fe69d0e54c4fe22 ]

If a malicious device gives a short MAC it can elicit up to
5 bytes of leaked memory out of the driver. We need to check for
ETH_ALEN instead.

Reported-by: syzbot+a8d4acdad35e6bbca308@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/usb/ax88172a.c