[PATCH] USB: Gadget RNDIS fix alloc bug. (buffer overflow)
authorShaun Tancheff <shaun@tancheff.com>
Thu, 23 Feb 2006 03:47:19 +0000 (19:47 -0800)
committerGreg Kroah-Hartman <gregkh@suse.de>
Tue, 28 Feb 2006 20:42:06 +0000 (12:42 -0800)
commit8763716bfe4d8a16bef28c9947cf9d799b1796a5
treef0e8d0dcbf55953ea084f110c013743716b2a068
parentd5ec33490c67affef93aebf76e1238260c82d377
[PATCH] USB: Gadget RNDIS fix alloc bug. (buffer overflow)

Remote NDIS response to OID_GEN_SUPPORTED_LIST only allocated space
for the data attached to the reply, and not the reply structure
itself. This caused other kmalloc'd memory to be corrupted.

Signed-off-by: Shaun Tancheff <shaun@tancheff.com>
Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/usb/gadget/rndis.c