diff options
| author | Tobias Herzog | 2017-03-30 22:15:10 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman | 2017-04-01 11:05:03 +0200 |
| commit | 1bb9914e1730417d530de9ed37e59efdc647146b (patch) | |
| tree | 86657e8ac8ebd75547ee47dd558b6ff360228857 /drivers/usb/class/cdc-acm.h | |
| parent | USB: Proper handling of Race Condition when two USB class drivers try to call... (diff) | |
| download | kernel-qcow2-linux-1bb9914e1730417d530de9ed37e59efdc647146b.tar.gz kernel-qcow2-linux-1bb9914e1730417d530de9ed37e59efdc647146b.tar.xz kernel-qcow2-linux-1bb9914e1730417d530de9ed37e59efdc647146b.zip | |
cdc-acm: fix possible invalid access when processing notification
Notifications may only be 8 bytes long. Accessing the 9th and
10th byte of unimplemented/unknown notifications may be insecure.
Also check the length of known notifications before accessing anything
behind the 8th byte.
Signed-off-by: Tobias Herzog <t-herzog@gmx.de>
Acked-by: Oliver Neukum <oneukum@suse.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/class/cdc-acm.h')
0 files changed, 0 insertions, 0 deletions