linux/include/uapi
Masakazu Mokuno 05ffc7ed55 USB: core: Add type-specific length check of BOS descriptors
commit 81cf4a4536 upstream.

As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.

This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.

Signed-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2017-12-09 22:01:56 +01:00
..
asm-generic generic syscalls: kill cruft from removed pkey syscalls 2016-10-17 09:50:56 -07:00
drm drm_fourcc: Fix DRM_FORMAT_MOD_LINEAR #define 2017-10-08 10:26:02 +02:00
linux USB: core: Add type-specific length check of BOS descriptors 2017-12-09 22:01:56 +01:00
misc cxl: Use fixed width predefined types in data structure. 2016-08-09 16:52:01 +10:00
mtd mtd: kill the nand_ecclayout struct 2016-05-05 23:51:51 +02:00
rdma IB/cxgb3: fix misspelling in header guard 2017-02-01 08:33:07 +01:00
scsi scsi: cxlflash: Transition to application close model 2016-08-23 22:23:41 -04:00
sound Merge remote-tracking branch 'asoc/fix/topology-abi' into asoc-linus 2016-11-04 12:34:05 -06:00
video UAPI: (Scripted) Disintegrate include/video 2012-12-20 17:14:26 +00:00
xen xen/evtchn: add IOCTL_EVTCHN_RESTRICT 2016-07-25 10:59:31 +01:00
Kbuild cxl: Add userspace header file 2014-10-08 20:15:57 +11:00