diff options
| author | Shuah Khan <shuahkh@osg.samsung.com> | 2017-12-23 05:23:47 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-01-04 19:07:27 +0300 |
| commit | 5fd77a3a0e408c23ab4002a57db980e46bc16e72 (patch) | |
| tree | a0531af0618c2093491d0bbe4d26ffd6b6efb0ce /drivers/usb/mon | |
| parent | e1346fd87c71a1f61de1fe476ec8df1425ac931c (diff) | |
| download | linux-5fd77a3a0e408c23ab4002a57db980e46bc16e72.tar.xz | |
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer
v_send_ret_submit() handles urb with a null transfer_buffer, when it
replays a packet with potential malicious data that could contain a
null buffer.
Add a check for the condition when actual_length > 0 and transfer_buffer
is null.
Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/mon')
0 files changed, 0 insertions, 0 deletions