lkml.org 
[lkml]   [2024]   [Mar]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    SubjectRe: [syzbot] [wireless?] [usb?] UBSAN: array-index-out-of-bounds in htc_issue_send
    Date
    please test oob in htc_issue_send

    #syz test https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing

    diff --git a/drivers/net/wireless/ath/ath9k/htc_hst.c b/drivers/net/wireless/ath/ath9k/htc_hst.c
    index eb631fd3336d..0d1115d1cc29 100644
    --- a/drivers/net/wireless/ath/ath9k/htc_hst.c
    +++ b/drivers/net/wireless/ath/ath9k/htc_hst.c
    @@ -295,6 +295,9 @@ int htc_connect_service(struct htc_target *target,
    }

    *conn_rsp_epid = target->conn_rsp_epid;
    + if (*conn_rsp_epid < 0 || *conn_rsp_epid > ENDPOINT_MAX)
    + return -EINVAL;
    +
    return 0;
    err:
    kfree_skb(skb);

    \
     
     \ /
      Last update: 2024-05-27 15:57    [W:2.953 / U:0.024 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site