Skip to content
Commit 8ff41cc2 authored by Dan Carpenter's avatar Dan Carpenter Committed by David S. Miller
Browse files

net: qrtr: Fix an out of bounds read qrtr_endpoint_post()



This code assumes that the user passed in enough data for a
qrtr_hdr_v1 or qrtr_hdr_v2 struct, but it's not necessarily true.  If
the buffer is too small then it will read beyond the end.

Reported-by: default avatarManivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
Reported-by: default avatar <syzbot+b8fe393f999a291a9ea6@syzkaller.appspotmail.com>
Fixes: 194ccc88

 ("net: qrtr: Support decoding incoming v2 packets")
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 6a2febec
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment