diff options
| author | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-09-21 16:58:48 +0200 |
|---|---|---|
| committer | Ajay Agarwal <ajaya@codeaurora.org> | 2018-07-10 15:10:09 +0530 |
| commit | 808b3542a7b0e8ab9d89a16b663d2b30d9a73b72 (patch) | |
| tree | 8560e64b5567ba254efeb0d0222a888dc2f97782 /tools/perf/util/llvm-utils.c | |
| parent | ed11739bc12aac4b63046d8dd896dac814587ef2 (diff) | |
USB: core: harden cdc_parse_cdc_header
Andrey Konovalov reported a possible out-of-bounds problem for the
cdc_parse_cdc_header function. He writes:
It looks like cdc_parse_cdc_header() doesn't validate buflen
before accessing buffer[1], buffer[2] and so on. The only check
present is while (buflen > 0).
So fix this issue up by properly validating the buffer length matches
what the descriptor says it is.
Change-Id: I9c65dc98778aa357911e554c8d28deef2bf9a5b3
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Tested-by: Andrey Konovalov <andreyknvl@google.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Git-commit: 2e1c42391ff2556387b3cb6308b24f6f65619feb
Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Signed-off-by: Srinivasa Rao Kuppala <srkupp@codeaurora.org>
Diffstat (limited to 'tools/perf/util/llvm-utils.c')
0 files changed, 0 insertions, 0 deletions