Oliver Neukum 831d0fcba1 usbnet: sanity checking of packet sizes and device mtu ...

[ Upstream commit 280ceaed79 ]

After a reset packet sizes and device mtu can change and need
to be reevaluated to calculate queue sizes.
Malicious devices can set this to zero and we divide by it.
Introduce sanity checking.

Reported-and-tested-by:  syzbot+6102c120be558c885f04@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-10-05 13:09:30 +02:00

..

asix_common.c

asix: Check for supported Wake-on-LAN modes

2018-09-29 11:31:29 -07:00

asix_devices.c

net: usb: asix: init MAC address buffers

2019-07-26 09:14:15 +02:00

asix.h

asix: Fix small memory leak in ax88772_unbind()

2017-08-07 10:10:19 -07:00

ax88172a.c

net: usbnet: support 64bit stats

2017-04-03 19:09:40 -07:00

ax88179_178a.c

ax88179_178a: Check for supported Wake-on-LAN modes

2018-09-29 11:31:29 -07:00

catc.c

net: usb: Mark expected switch fall-throughs

2018-06-30 20:47:16 +09:00

cdc_eem.c

net: cdc_eem: clean up bind error path

2018-03-07 15:39:27 -05:00

cdc_ether.c

cdc_ether: fix rndis support for Mediatek based smartphones

2019-09-19 09:09:28 +02:00

cdc_mbim.c

net: usb: cdc_mbim: add flag FLAG_SEND_ZLP

2018-06-01 14:01:42 -04:00

cdc_ncm.c

cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize

2019-10-05 13:09:27 +02:00

cdc_subset.c

…

cdc-phonet.c

net: usb: Mark expected switch fall-throughs

2018-06-30 20:47:16 +09:00

ch9200.c

net: ch9200: add missing USB-descriptor endianness conversions

2017-05-12 12:15:46 -04:00

cx82310_eth.c

cx82310_eth: fix a memory leak bug

2019-09-10 10:33:47 +01:00

dm9601.c

net: usbnet: support 64bit stats

2017-04-03 19:09:40 -07:00

gl620a.c

networking: make skb_push & __skb_push return void pointers

2017-06-16 11:48:40 -04:00

hso.c

USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data

2018-12-29 13:37:54 +01:00

huawei_cdc_ncm.c

cdc_ncm: Set NTB format again after altsetting switch for Huawei devices

2017-07-14 08:15:05 -07:00

int51x1.c

net: introduce __skb_put_[zero, data, u8]

2017-06-20 13:30:14 -04:00

ipheth.c

usbnet: ipheth: fix racing condition

2019-06-19 08:18:04 +02:00

kalmia.c

net: kalmia: fix memory leaks

2019-09-10 10:33:48 +01:00

kaweth.c

net: usb: kaweth: use irqsave() in USB's complete callback

2018-06-22 13:57:45 +09:00

Kconfig

lan78xx: Lan7801 Support for Fixed PHY

2018-04-29 21:41:01 -04:00

lan78xx.c

lan78xx: Fix memory leaks

2019-09-10 10:33:47 +01:00

lan78xx.h

lan78xx: add LAN7801 MAC only support

2016-12-08 14:21:47 -05:00

lg-vl600.c

net: drivers/net: Remove unnecessary skb_copy_expand OOM messages

2018-03-15 14:28:03 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

mcs7830.c

net: usbnet: support 64bit stats

2017-04-03 19:09:40 -07:00

net1080.c

networking: add and use skb_put_u8()

2017-06-16 11:48:40 -04:00

pegasus.c

net: usb: pegasus: fix improper read if get_registers() fail

2019-08-25 10:47:50 +02:00

pegasus.h

usbnet: pegasus: Use net_device_stats from struct net_device

2017-04-07 07:03:33 -07:00

plusb.c

usb: plusb: Add support for PL-27A1

2017-04-25 10:08:16 -04:00

qmi_wwan.c

net: usb: qmi_wwan: Add the BroadMobi BM818 card

2019-08-29 08:28:32 +02:00

r8152.c

r8152: Set memory to all 0xFFs on failed reg reads

2019-09-21 07:17:00 +02:00

rndis_host.c

rndis_host: support Novatel Verizon USB730L

2017-10-03 14:30:46 -07:00

rtl8150.c

Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux

2018-07-20 21:17:12 -07:00

sierra_net.c

net: usb: Convert timers to use timer_setup()

2017-10-18 12:40:26 +01:00

smsc75xx.c

net/usb: cancel pending work when unbinding smsc75xx

2018-10-04 13:51:30 -07:00

smsc75xx.h

…

smsc95xx.c

usbnet: smsc95xx: fix rx packet alignment

2019-02-12 19:47:00 +01:00

smsc95xx.h

smsc95xx: Add comments to the registers definition

2017-04-17 13:04:52 -04:00

sr9700.c

net: usb: sr9700: Replace mdelay() with msleep() in sr9700_bind()

2018-07-27 13:45:15 -07:00

sr9700.h

…

sr9800.c

sr9800: Check for supported Wake-on-LAN modes

2018-09-29 11:31:29 -07:00

sr9800.h

…

usbnet.c

usbnet: sanity checking of packet sizes and device mtu

2019-10-05 13:09:30 +02:00

zaurus.c

networking: add and use skb_put_u8()

2017-06-16 11:48:40 -04:00