linux/drivers/usb/class
Tobias Herzog 809ae061d9 cdc-acm: fix possible invalid access when processing notification
commit 1bb9914e17 upstream.

Notifications may only be 8 bytes long. Accessing the 9th and
10th byte of unimplemented/unknown notifications may be insecure.
Also check the length of known notifications before accessing anything
behind the 8th byte.

Signed-off-by: Tobias Herzog <t-herzog@gmx.de>
Acked-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2017-05-25 15:44:36 +02:00
..
cdc-acm.c cdc-acm: fix possible invalid access when processing notification 2017-05-25 15:44:36 +02:00
cdc-acm.h cdc-acm: fix wrong pipe type on rx interrupt xfers 2016-08-15 16:30:56 +02:00
cdc-wdm.c USB: Revert "cdc-wdm: fix "out-of-sync" due to missing notifications" 2017-05-20 14:28:34 +02:00
Kconfig USB: regroup all depends on USB within an if USB block 2013-04-09 16:49:07 -07:00
Makefile USB: add USB test and measurement class driver 2008-10-17 14:40:51 -07:00
usblp.c usblp: do not set TASK_INTERRUPTIBLE before lock 2015-11-19 16:31:42 -08:00
usbtmc.c USB: usbtmc: fix probe error path 2017-03-30 09:41:24 +02:00