提交 4e60bd71 编写于 作者: J Johan Hovold 提交者: Xie XiuQi

USB: legousbtower: fix slab info leak at probe

commit 1d427be4 upstream.

Make sure to check for short transfers when retrieving the version
information at probe to avoid leaking uninitialised slab data when
logging it.

Fixes: 1da177e4 ("Linux-2.6.12-rc2")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: NJohan Hovold <johan@kernel.org>
Link: https://lore.kernel.org/r/20190919083039.30898-2-johan@kernel.orgSigned-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: NYang Yingliang <yangyingliang@huawei.com>
上级 15e201fd
...@@ -891,8 +891,10 @@ static int tower_probe (struct usb_interface *interface, const struct usb_device ...@@ -891,8 +891,10 @@ static int tower_probe (struct usb_interface *interface, const struct usb_device
get_version_reply, get_version_reply,
sizeof(*get_version_reply), sizeof(*get_version_reply),
1000); 1000);
if (result < 0) { if (result < sizeof(*get_version_reply)) {
dev_err(idev, "LEGO USB Tower get version control request failed\n"); if (result >= 0)
result = -EIO;
dev_err(idev, "get version request failed: %d\n", result);
retval = result; retval = result;
goto error; goto error;
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册