diff options
author | Tobias Herzog <t-herzog@gmx.de> | 2017-03-30 22:15:10 +0200 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-04-01 11:05:03 +0200 |
commit | 1bb9914e1730417d530de9ed37e59efdc647146b (patch) | |
tree | 86657e8ac8ebd75547ee47dd558b6ff360228857 /drivers/mtd | |
parent | 2f86a96be0ccb1302b7eee7855dbee5ce4dc5dfb (diff) |
cdc-acm: fix possible invalid access when processing notification
Notifications may only be 8 bytes long. Accessing the 9th and
10th byte of unimplemented/unknown notifications may be insecure.
Also check the length of known notifications before accessing anything
behind the 8th byte.
Signed-off-by: Tobias Herzog <t-herzog@gmx.de>
Acked-by: Oliver Neukum <oneukum@suse.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/mtd')
0 files changed, 0 insertions, 0 deletions