Skip to content
Commit 735929cf authored by Dan Carpenter's avatar Dan Carpenter Committed by Greg Kroah-Hartman
Browse files

net: qrtr: Fix an out of bounds read qrtr_endpoint_post()

commit 8ff41cc2

 upstream.

This code assumes that the user passed in enough data for a
qrtr_hdr_v1 or qrtr_hdr_v2 struct, but it's not necessarily true.  If
the buffer is too small then it will read beyond the end.

Reported-by: default avatarManivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
Reported-by: default avatar <syzbot+b8fe393f999a291a9ea6@syzkaller.appspotmail.com>
Fixes: 194ccc88

 ("net: qrtr: Support decoding incoming v2 packets")
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent fa4a80a1
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment