Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1ca532e9 authored by Michel Pollet's avatar Michel Pollet Committed by Felipe Balbi
Browse files

USB: rndis: Fix for handling garbled messages 



A message can be forged to crash the stack; here we make sure we don't
completely break the system if this occurs

Signed-off-by: default avatarMichel Pollet <michel.pollet@bp.renesas.com>
Signed-off-by: default avatarFelipe Balbi <felipe.balbi@linux.intel.com>
parent 44feb8e6

drivers/usb/gadget/function/rndis.c

+3 −0
Original line number Diff line number Diff line
@@ -851,6 +851,9 @@ int rndis_msg_parser(struct rndis_params *params, u8 *buf) 
		 */

		pr_warn("%s: unknown RNDIS message 0x%08X len %d\n",

			__func__, MsgType, MsgLength);

		/* Garbled message can be huge, so limit what we display */

		if (MsgLength > 16)

			MsgLength = 16;

		print_hex_dump_bytes(__func__, DUMP_PREFIX_OFFSET,

				     buf, MsgLength);

		break;