diff options
| author | Foster Snowhill <forst@pen.gy> | 2025-01-26 00:54:03 +0100 |
|---|---|---|
| committer | Paolo Abeni <pabeni@redhat.com> | 2025-01-28 12:16:32 +0100 |
| commit | c219427ed296f94bb4b91d08626776dc7719ee27 (patch) | |
| tree | a5f952016643e1a57dad9c8500671a85b4eb4502 /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | 19ae40f572a9ce1ade9954990af709a03fd37010 (diff) | |
usbnet: ipheth: fix possible overflow in DPE length check
Originally, it was possible for the DPE length check to overflow if
wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB
read.
Move the wDatagramIndex term to the other side of the inequality.
An existing condition ensures that wDatagramIndex < urb->actual_length.
Fixes: a2d274c62e44 ("usbnet: ipheth: add CDC NCM support")
Cc: stable@vger.kernel.org
Signed-off-by: Foster Snowhill <forst@pen.gy>
Reviewed-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Diffstat (limited to 'tools/perf/scripts/python/export-to-postgresql.py')
0 files changed, 0 insertions, 0 deletions