Messages in this thread | | | From | Gwendal Grignou <> | Date | Tue, 8 Mar 2016 09:02:51 -0800 | Subject | Re: [PATCH v2] platform/chrome: cros_ec_dev - Fix security issue |
| |
On Sun, Mar 6, 2016 at 12:11 PM, Olof Johansson <olof@lixom.net> wrote: > Hi, > ... > > How about you introduce a reasonable max size for a transaction instead > (256K?), and compare data_size with that? Might want to check with the EC folks > what they expect larges transactions to be from their side, and go with > a margin above that. Make sense, patch coming. > > > Also, in your commit message you should refer to the CVE this fixes. AFAIK, no CVE for this bug. > > > -Olof
| |