projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e1346fd) | patch
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer
authorShuah Khan <shuahkh@osg.samsung.com>
Sat, 23 Dec 2017 02:23:47 +0000 (19:23 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Jan 2018 16:07:27 +0000 (17:07 +0100)
commit5fd77a3a0e408c23ab4002a57db980e46bc16e72
treea0531af0618c2093491d0bbe4d26ffd6b6efb0cetree | snapshot
parente1346fd87c71a1f61de1fe476ec8df1425ac931ccommit | diff
usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer

v_send_ret_submit() handles urb with a null transfer_buffer, when it
replays a packet with potential malicious data that could contain a
null buffer.

Add a check for the condition when actual_length > 0 and transfer_buffer
is null.

Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/usbip/vudc_tx.c diff | blob | history