OSDN Git Service

CDC-NCM: handle incomplete transfer of MTU
authorOliver Neukum <oneukum@suse.com>
Thu, 7 Nov 2019 08:48:01 +0000 (09:48 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 12 Nov 2019 18:13:14 +0000 (19:13 +0100)
commit7ff40996bb2fff86c334f61bb7e154a55d56f901
tree6d34333fff2259423f4d65f91eb63c004cc2b70d
parent1b8629e7c9b52079a6471973a1e2e14012b885e9
CDC-NCM: handle incomplete transfer of MTU

[ Upstream commit 332f989a3b0041b810836c5c3747e59aad7e9d0b ]

A malicious device may give half an answer when asked
for its MTU. The driver will proceed after this with
a garbage MTU. Anything but a complete answer must be treated
as an error.

V2: used sizeof as request by Alexander

Reported-and-tested-by: syzbot+0631d878823ce2411636@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/usb/cdc_ncm.c