diff options
| author | Foster Snowhill <forst@pen.gy> | 2025-01-26 02:54:03 +0300 |
|---|---|---|
| committer | Paolo Abeni <pabeni@redhat.com> | 2025-01-28 14:16:32 +0300 |
| commit | c219427ed296f94bb4b91d08626776dc7719ee27 (patch) | |
| tree | a5f952016643e1a57dad9c8500671a85b4eb4502 /scripts/gdb/linux/modules.py | |
| parent | 19ae40f572a9ce1ade9954990af709a03fd37010 (diff) | |
| download | linux-c219427ed296f94bb4b91d08626776dc7719ee27.tar.xz | |
usbnet: ipheth: fix possible overflow in DPE length check
Originally, it was possible for the DPE length check to overflow if
wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB
read.
Move the wDatagramIndex term to the other side of the inequality.
An existing condition ensures that wDatagramIndex < urb->actual_length.
Fixes: a2d274c62e44 ("usbnet: ipheth: add CDC NCM support")
Cc: stable@vger.kernel.org
Signed-off-by: Foster Snowhill <forst@pen.gy>
Reviewed-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Diffstat (limited to 'scripts/gdb/linux/modules.py')
0 files changed, 0 insertions, 0 deletions