[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] usb: check RNDIS buffer offsets & length
|
From: |
P J P |
|
Subject: |
Re: [Qemu-devel] [PATCH] usb: check RNDIS buffer offsets & length |
|
Date: |
Tue, 9 Feb 2016 16:31:33 +0530 (IST) |
+-- On Fri, 5 Feb 2016, P J P wrote --+
| From: Prasad J Pandit <address@hidden>
|
| When processing remote NDIS control message packets, the USB Net
| device emulator uses a fixed length(4096) data buffer. The incoming
| informationBufferOffset & Length combination could cross that range.
| Check control message buffer offsets and length to avoid it.
|
| Reported-by: Qinghao Tang <address@hidden>
...ping!
--
- P J P
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F