diff options
| author | Jack Pham <jackp@codeaurora.org> | 2017-10-23 09:47:49 -0700 |
|---|---|---|
| committer | Jack Pham <jackp@codeaurora.org> | 2018-01-17 18:04:52 -0800 |
| commit | bc4f3590a73b0edd0c5ea3956adbe45e776f1206 (patch) | |
| tree | 8dd7c7686db56b520dba0a6764f058caca44d939 /include/linux/fpga/fpga-mgr.h | |
| parent | 9f8d148622e4046522eded18f75f6ab363899f97 (diff) | |
usb: pd: avoid out-of-bounds access when reading PDOs
Most often a source will send fewer than the maximum number
of PDOs (7). Since the rx_msg buffer is now allocated up to
the size of the actual data, honor the rx_msg->data_len when
copying to pd->received_pdos rather than always 28 bytes.
This fixes out-of-bounds read access as reported by KASAN.
Change-Id: I5f98f7ccba027c1ab436ccf6fc822e2a319bafa1
Signed-off-by: Jack Pham <jackp@codeaurora.org>
Diffstat (limited to 'include/linux/fpga/fpga-mgr.h')
0 files changed, 0 insertions, 0 deletions