[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] usb: check RNDIS buffer offsets & length
|
From: |
P J P |
|
Subject: |
Re: [Qemu-devel] [PATCH] usb: check RNDIS buffer offsets & length |
|
Date: |
Mon, 15 Feb 2016 09:56:43 +0530 (IST) |
+-- On Tue, 9 Feb 2016, P J P wrote --+
| +-- On Fri, 5 Feb 2016, P J P wrote --+
| | From: Prasad J Pandit <address@hidden>
| |
| | When processing remote NDIS control message packets, the USB Net
| | device emulator uses a fixed length(4096) data buffer. The incoming
| | informationBufferOffset & Length combination could cross that range.
| | Check control message buffer offsets and length to avoid it.
| |
| | Reported-by: Qinghao Tang <address@hidden>
|
| ...ping!
Ping...Gerd?
--
- P J P
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F