From: Dan Carpenter <dan.carpen...@oracle.com>
Date: Tue, 30 Jun 2020 14:46:15 +0300
> This code assumes that the user passed in enough data for a
> qrtr_hdr_v1 or qrtr_hdr_v2 struct, but it's not necessarily true. If
> the buffer is too small then it will read beyond the end.
>
> Reported-by: Manivannan Sadhasivam <manivannan.sadhasi...@linaro.org>
> Reported-by: syzbot+b8fe393f999a291a9...@syzkaller.appspotmail.com
> Fixes: 194ccc88297a ("net: qrtr: Support decoding incoming v2 packets")
> Signed-off-by: Dan Carpenter <dan.carpen...@oracle.com>
Applied and queued up for -stable, thanks Dan.
