Messages in this thread | | | Subject | Re: [PATCH v2 2/4] cdc-acm: fix possible invalid access when processing notification | From | Sergei Shtylyov <> | Date | Sun, 19 Mar 2017 12:50:24 +0300 |
| |
On 3/18/2017 9:52 PM, Tobias Herzog wrote:
> Notifications may only be 8 bytes so long. Accessing the 9th and
s/so//. "So long and thanks for all the fish!" :-)
> 10th byte of unimplemented/unknown notifications may be insecure. > Also check the length of known notifications before accessing anything > behind the 8th byte. > > Signed-off-by: Tobias Herzog <t-herzog@gmx.de> [...]
MBR, Sergei
| |