[Bug 209407] cdc_ncm_fill_tx_frame calls memset with huge length when called... | linux-usb

[Bug 209407] New: skb_over_panic in cdc_mbim_tx_fixup · <hidden> · 2020-09-27
[Bug 209407] skb_over_panic in cdc_mbim_tx_fixup · <hidden> · 2020-12-31
[Bug 209407] skb_over_panic in cdc_mbim_tx_fixup · <hidden> · 2020-12-31
[Bug 209407] skb_over_panic in cdc_mbim_tx_fixup · <hidden> · 2021-01-01
[Bug 209407] skb_over_panic in cdc_mbim_tx_fixup · <hidden> · 2021-01-01
[Bug 209407] cdc_ncm_fill_tx_frame calls memset with huge length when called from cdc_mbim_tx_fixup · <hidden> · 2021-01-01
[Bug 209407] cdc_ncm_fill_tx_frame calls memset with huge length when called from cdc_mbim_tx_fixup · <hidden> · 2021-01-03
[Bug 209407] cdc_ncm_fill_tx_frame calls memset with huge length when called from cdc_mbim_tx_fixup · <hidden> · 2021-01-22

[Bug 209407] cdc_ncm_fill_tx_frame calls memset with huge length when called from cdc_mbim_tx_fixup

From: <hidden>
Date: 2021-01-03 15:03:15

https://bugzilla.kernel.org/show_bug.cgi?id=209407

--- Comment #9 from Jouni Seppänen (jks@iki.fi) ---

I believe I figured out what is happening. Patch in
https://patchwork.kernel.org/project/linux-usb/patch/20210103143602.95343-1-jks@iki.fi/

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help