From: Dan Carpenter <[email protected]> Date: Tue, 30 Jun 2020 14:46:15 +0300
> This code assumes that the user passed in enough data for a > qrtr_hdr_v1 or qrtr_hdr_v2 struct, but it's not necessarily true. If > the buffer is too small then it will read beyond the end. > > Reported-by: Manivannan Sadhasivam <[email protected]> > Reported-by: [email protected] > Fixes: 194ccc88297a ("net: qrtr: Support decoding incoming v2 packets") > Signed-off-by: Dan Carpenter <[email protected]> Applied and queued up for -stable, thanks Dan.

