diff options
author | Shuah Khan <shuahkh@osg.samsung.com> | 2017-12-22 19:23:47 -0700 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-01-04 17:07:27 +0100 |
commit | 5fd77a3a0e408c23ab4002a57db980e46bc16e72 (patch) | |
tree | a0531af0618c2093491d0bbe4d26ffd6b6efb0ce /drivers/usb/usbip/Makefile | |
parent | e1346fd87c71a1f61de1fe476ec8df1425ac931c (diff) |
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer
v_send_ret_submit() handles urb with a null transfer_buffer, when it
replays a packet with potential malicious data that could contain a
null buffer.
Add a check for the condition when actual_length > 0 and transfer_buffer
is null.
Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/usbip/Makefile')
0 files changed, 0 insertions, 0 deletions