]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 14 Jun 2021 09:55:35 +0000 (12:55 +0300)
committerStefan Bader <stefan.bader@canonical.com>
Fri, 13 Aug 2021 07:31:27 +0000 (09:31 +0200)
commit9aedf2725fdabd160f06317ec899a3c79f512131
treeb9c4f9be326e7882ae22bc8a15b37f8302564bae
parent5382579e0f58e25b5b5251289432c399302364bd
staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()

BugLink: https://bugs.launchpad.net/bugs/1938340
[ Upstream commit 4a36e160856db8a8ddd6a3d2e5db5a850ab87f82 ]

There needs to be a check to verify that we don't read beyond the end
of "buf".  This function is called from do_rx().  The "buf" is the USB
transfer_buffer and "len" is "urb->actual_length".

Fixes: 61e121047645 ("staging: gdm7240: adding LTE USB driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/YMcnl4zCwGWGDVMG@mwanda
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
drivers/staging/gdm724x/gdm_lte.c