diff options
author | Shuah Khan <shuahkh@osg.samsung.com> | 2017-12-22 19:23:47 -0700 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-01-17 09:38:56 +0100 |
commit | 8ab8c6e6607a14ebd54319535b17e384d2872df9 (patch) | |
tree | a049bf33109ddde3890e1cf7b80b94536329d41b /drivers/net/arcnet | |
parent | 86c8d58fc7538d0f44367f49d24568e925049c0d (diff) |
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer
commit 5fd77a3a0e408c23ab4002a57db980e46bc16e72 upstream.
v_send_ret_submit() handles urb with a null transfer_buffer, when it
replays a packet with potential malicious data that could contain a
null buffer.
Add a check for the condition when actual_length > 0 and transfer_buffer
is null.
Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/net/arcnet')
0 files changed, 0 insertions, 0 deletions