Mathias Payer 7b6e85da8d USB: check usb_get_extra_descriptor for proper size ...

commit 704620afc7 upstream.

When reading an extra descriptor, we need to properly check the minimum
and maximum size allowed, to prevent from invalid data being sent by a
device.

Reported-by: Hui Peng <benquike@gmail.com>
Reported-by: Mathias Payer <mathias.payer@nebelwelt.net>
Co-developed-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Hui Peng <benquike@gmail.com>
Signed-off-by: Mathias Payer <mathias.payer@nebelwelt.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-12-13 09:18:51 +01:00

..

buffer.c

usb: separate out sysdev pointer from usb_bus

2017-03-23 08:20:21 +01:00

config.c

USB: Accept bulk endpoints with 1024-byte maxpacket

2018-05-09 09:51:55 +02:00

devices.c

usb: fix some references for /proc/bus/usb

2017-04-18 16:54:19 +02:00

devio.c

USB: fix the usbfs flag sanitization for control transfers

2018-11-10 07:48:36 -08:00

driver.c

USB: remove LPM management from usb_driver_claim_interface()

2018-10-03 17:00:56 -07:00

endpoint.c

Merge tag 'usb-for-v4.10' of git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-next

2016-11-18 16:02:15 +01:00

file.c

USB: Proper handling of Race Condition when two USB class drivers try to call init_usb_class simultaneously

2017-03-29 11:55:25 +02:00

generic.c

USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw

2018-04-24 09:36:25 +02:00

hcd-pci.c

usb: Don't die twice if PCI xhci host is not responding in resume

2018-09-26 08:38:06 +02:00

hcd.c

USB: Increment wakeup count on remote wakeup.

2018-05-01 12:58:11 -07:00

hub.c

USB: check usb_get_extra_descriptor for proper size

2018-12-13 09:18:51 +01:00

hub.h

usb: Support USB 3.1 extended port status request

2016-01-24 20:16:52 -08:00

Kconfig

docs-rst: fix usb cross-references

2017-04-11 14:41:29 -06:00

ledtrig-usbport.c

USB: ledtrig-usbport: fix of-node leak

2018-03-19 08:42:48 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

message.c

usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()

2018-09-26 08:38:07 +02:00

notify.c

USB: core: add missing license information to some files

2016-10-29 12:51:56 -04:00

of.c

USB: of: document reference taken by child-lookup helper

2017-06-13 11:07:32 +02:00

otg_whitelist.h

usb: core: use IS_ENABLED() instead of checking for built-in or module

2016-09-02 14:36:33 +02:00

port.c

Revert "USB / PM: Allow USB devices to remain runtime-suspended when sleeping"

2016-05-02 08:44:31 -07:00

quirks.c

usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device

2018-12-13 09:18:50 +01:00

sysfs.c

usb: Convert to using %pOF instead of full_name

2017-07-22 15:56:53 +02:00

urb.c

usb: core: Add a helper function to check the validity of EP type in URB

2018-02-25 11:07:45 +01:00

usb-acpi.c

usb: optimize acpi companion search for usb port devices

2017-06-03 18:02:58 +09:00

usb.c

USB: check usb_get_extra_descriptor for proper size

2018-12-13 09:18:51 +01:00

usb.h

USB: core: add missing license information to some files

2016-10-29 12:51:56 -04:00