Messages in this thread | | | Date | Tue, 30 Jun 2020 18:36:58 -0700 (PDT) | Subject | Re: [PATCH net] net: qrtr: Fix an out of bounds read qrtr_endpoint_post() | From | David Miller <> |
| |
From: Dan Carpenter <dan.carpenter@oracle.com> Date: Tue, 30 Jun 2020 14:46:15 +0300
> This code assumes that the user passed in enough data for a > qrtr_hdr_v1 or qrtr_hdr_v2 struct, but it's not necessarily true. If > the buffer is too small then it will read beyond the end. > > Reported-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> > Reported-by: syzbot+b8fe393f999a291a9ea6@syzkaller.appspotmail.com > Fixes: 194ccc88297a ("net: qrtr: Support decoding incoming v2 packets") > Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Applied and queued up for -stable, thanks Dan.
| |