linux/include/uapi
Masakazu Mokuno 903b2d14d0 USB: core: Add type-specific length check of BOS descriptors
commit 81cf4a4536 upstream.

As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.

This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.

Signed-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2017-12-10 13:40:44 +01:00
..
asm-generic License cleanup: add SPDX license identifier to uapi header files with no license 2017-11-02 11:19:54 +01:00
drm drm/i915: Reject unknown syncobj flags 2017-11-08 10:19:45 -08:00
linux USB: core: Add type-specific length check of BOS descriptors 2017-12-10 13:40:44 +01:00
misc License cleanup: add SPDX license identifier to uapi header files with a license 2017-11-02 11:20:11 +01:00
mtd License cleanup: add SPDX license identifier to uapi header files with a license 2017-11-02 11:20:11 +01:00
rdma License cleanup: add SPDX license identifier to uapi header files with a license 2017-11-02 11:20:11 +01:00
scsi License cleanup: add SPDX license identifier to uapi header files with a license 2017-11-02 11:20:11 +01:00
sound tools/headers: Synchronize kernel ABI headers 2017-11-04 09:27:46 +01:00
video License cleanup: add SPDX license identifier to uapi header files with a license 2017-11-02 11:20:11 +01:00
xen License cleanup: add SPDX license identifier to uapi header files with a license 2017-11-02 11:20:11 +01:00