Description: qeth: fix length check in SNMP processing
Symptom: Undefined behaviour.
Problem: The response for a SNMP request can consist of multiple parts,
which the cmd callback stages into a kernel buffer until all
parts have been received. If the callback detects that the staging buffer provides insufficient space, it bails out with error.
This processing is buggy for the first part of the response -
while it initially checks for a length of 'data_len', it later copies an additional amount of 'offsetof(struct qeth_snmp_cmd, data)' bytes.
Solution: Fix the calculation of 'data_len' for the first part of the response.
Upstream-ID: 9a764c1e59684c0358e16ccaafd870629f2cfe67
Should be applied to all Ubuntu Releases in Service
Description: qeth: fix length check in SNMP processing
staging buffer provides insufficient space, it bails out with
error.
copies an additional amount of
'offsetof( struct qeth_snmp_cmd, data)' bytes.
response. 358e16ccaafd870 629f2cfe67
Symptom: Undefined behaviour.
Problem: The response for a SNMP request can consist of multiple parts,
which the cmd callback stages into a kernel buffer until all
parts have been received. If the callback detects that the
This processing is buggy for the first part of the response -
while it initially checks for a length of 'data_len', it later
Solution: Fix the calculation of 'data_len' for the first part of the
Upstream-ID: 9a764c1e59684c0
Should be applied to all Ubuntu Releases in Service