[U-Boot] [PATCH v2 1/5] CVE: net: fix unbounded memcpy of UDP packet//RE: [PATCH 1/5] CVE: net: fix unbounded memcpy of UDP packet

[Joe Hershberger]

On Thu, Aug 29, 2019 at 8:48 AM liucheng (G) <liucheng32 at huawei.com> wrote:
>
> Changes in v2:
> - Add reviewed-by and reported-by tags for patch 1/5
> --------------------------------------------------------------------------------------------------------------
> CVE: net: fix unbounded memcpy of UDP packet
>
> This patch adds a check to udp_len to fix unbounded memcpy for
> CVE-2019-14192, CVE-2019-14193 and CVE-2019-14199.
>
> Signed-off-by: Cheng Liu <liucheng32 at huawei.com>
> Reviewed-by: Simon Goldschmidt <simon.k.r.goldschmidt at gmail.com>
> Reported-by: Fermín Serna <fermin at semmle.com>

Acked-by: Joe Hershberger <joe.hershberger at ni.com>