| commit | 5fd77a3a0e408c23ab4002a57db980e46bc16e72 | [log] [tgz] |
|---|---|---|
| author | Shuah Khan <shuahkh@osg.samsung.com> | Fri Dec 22 19:23:47 2017 -0700 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Thu Jan 04 17:07:27 2018 +0100 |
| tree | a0531af0618c2093491d0bbe4d26ffd6b6efb0ce | |
| parent | e1346fd87c71a1f61de1fe476ec8df1425ac931c [diff] |
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer v_send_ret_submit() handles urb with a null transfer_buffer, when it replays a packet with potential malicious data that could contain a null buffer. Add a check for the condition when actual_length > 0 and transfer_buffer is null. Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>