Re: [PATCH net] net: qrtr: Fix an out of bounds read qrtr_endpoint_post()

[David Miller]

From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
Date: Tue, 30 Jun 2020 14:46:15 +0300

> This code assumes that the user passed in enough data for a
> qrtr_hdr_v1 or qrtr_hdr_v2 struct, but it's not necessarily true.  If
> the buffer is too small then it will read beyond the end.
> 
> Reported-by: Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx>
> Reported-by: syzbot+b8fe393f999a291a9ea6@xxxxxxxxxxxxxxxxxxxxxxxxx
> Fixes: 194ccc88297a ("net: qrtr: Support decoding incoming v2 packets")
> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>

Applied and queued up for -stable, thanks Dan.