[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] usb: check RNDIS buffer offsets & length
From: |
Gerd Hoffmann |
Subject: |
Re: [Qemu-devel] [PATCH] usb: check RNDIS buffer offsets & length |
Date: |
Mon, 15 Feb 2016 10:41:55 +0100 |
On Mo, 2016-02-15 at 09:56 +0530, P J P wrote:
> +-- On Tue, 9 Feb 2016, P J P wrote --+
> | +-- On Fri, 5 Feb 2016, P J P wrote --+
> | | From: Prasad J Pandit <address@hidden>
> | |
> | | When processing remote NDIS control message packets, the USB Net
> | | device emulator uses a fixed length(4096) data buffer. The incoming
> | | informationBufferOffset & Length combination could cross that range.
> | | Check control message buffer offsets and length to avoid it.
> | |
> | | Reported-by: Qinghao Tang <address@hidden>
> |
> | ...ping!
>
> Ping...Gerd?
Was offline for a week, will look soonish (have a email backlog to
process now ...)
cheers,
Gerd