Commit 1ca532e9 authored by Michel Pollet's avatar Michel Pollet Committed by Felipe Balbi

USB: rndis: Fix for handling garbled messages

A message can be forged to crash the stack; here we make sure we don't
completely break the system if this occurs
Signed-off-by: default avatarMichel Pollet <michel.pollet@bp.renesas.com>
Signed-off-by: default avatarFelipe Balbi <felipe.balbi@linux.intel.com>
parent 44feb8e6
...@@ -851,6 +851,9 @@ int rndis_msg_parser(struct rndis_params *params, u8 *buf) ...@@ -851,6 +851,9 @@ int rndis_msg_parser(struct rndis_params *params, u8 *buf)
*/ */
pr_warn("%s: unknown RNDIS message 0x%08X len %d\n", pr_warn("%s: unknown RNDIS message 0x%08X len %d\n",
__func__, MsgType, MsgLength); __func__, MsgType, MsgLength);
/* Garbled message can be huge, so limit what we display */
if (MsgLength > 16)
MsgLength = 16;
print_hex_dump_bytes(__func__, DUMP_PREFIX_OFFSET, print_hex_dump_bytes(__func__, DUMP_PREFIX_OFFSET,
buf, MsgLength); buf, MsgLength);
break; break;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment