Andrea Parri (Microsoft) 3946688edb hv_netvsc: Fix validation in netvsc_linkstatus_callback() ... Contrary to the RNDIS protocol specification, certain (pre-Fe) implementations of Hyper-V's vSwitch did not account for the status buffer field in the length of an RNDIS packet; the bug was fixed in newer implementations. Validate the status buffer fields using the length of the 'vmtransfer_page' packet (all implementations), that is known/validated to be less than or equal to the receive section size and not smaller than the length of the RNDIS message. Reported-by: Dexuan Cui <decui@microsoft.com> Suggested-by: Haiyang Zhang <haiyangz@microsoft.com> Signed-off-by: Andrea Parri (Microsoft) <parri.andrea@gmail.com> Fixes: 505e3f00c3 ("hv_netvsc: Add (more) validation for untrusted Hyper-V values") Signed-off-by: David S. Miller <davem@davemloft.net>		2021-03-01 15:30:52 -08:00
..
hyperv_net.h	hv_netvsc: Fix validation in netvsc_linkstatus_callback()	2021-03-01 15:30:52 -08:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	hv_netvsc: Add XDP support	2020-01-25 10:43:19 +01:00
netvsc_bpf.c	hv_netvsc: Add (more) validation for untrusted Hyper-V values	2021-01-18 19:47:47 -08:00
netvsc_drv.c	hv_netvsc: Fix validation in netvsc_linkstatus_callback()	2021-03-01 15:30:52 -08:00
netvsc_trace.c	hv_netvsc: add trace points	2018-03-17 20:10:27 -04:00
netvsc_trace.h	hv_netvsc: add trace points	2018-03-17 20:10:27 -04:00
netvsc.c	hyperv-next for 5.12	2021-02-21 13:24:39 -08:00
rndis_filter.c	hv_netvsc: Fix validation in netvsc_linkstatus_callback()	2021-03-01 15:30:52 -08:00