[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH 0/2] usb: check RNDIS offsets & length
From: |
Gerd Hoffmann |
Subject: |
Re: [Qemu-devel] [PATCH 0/2] usb: check RNDIS offsets & length |
Date: |
Mon, 22 Feb 2016 09:39:50 +0100 |
On Mi, 2016-02-17 at 00:23 +0530, P J P wrote:
> From: Prasad J Pandit <address@hidden>
>
> Hello,
>
> When processing remote NDIS control message packets, the USB Net
> device emulator uses a fixed length(4096) data buffer. The incoming
> packet length could exceed that OR informationBufferOffset & Length
> combination could overflow and cross that range. These two patches
> add checks to avoid such overflows.
Added both to usb patch queue.
thanks,
Gerd