CDC-NCM: handle incomplete transfer of MTU
authorOliver Neukum <oneukum@suse.com>
Thu, 7 Nov 2019 08:48:01 +0000 (09:48 +0100)
committerDavid S. Miller <davem@davemloft.net>
Thu, 7 Nov 2019 23:27:06 +0000 (15:27 -0800)
commit332f989a3b0041b810836c5c3747e59aad7e9d0b
tree412b95932374b9675b47915972fef54c0907d685
parent025ec40b81d785a98f76b8bdb509ac10773b4f12
CDC-NCM: handle incomplete transfer of MTU

A malicious device may give half an answer when asked
for its MTU. The driver will proceed after this with
a garbage MTU. Anything but a complete answer must be treated
as an error.

V2: used sizeof as request by Alexander

Reported-and-tested-by: syzbot+0631d878823ce2411636@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/usb/cdc_ncm.c