Masakazu Mokuno
81cf4a4536
USB: core: Add type-specific length check of BOS descriptors
...
As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.
This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.
Signed-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-11-28 15:17:49 +01:00
..
audio.h
License cleanup: add SPDX license identifier to uapi header files with a license
2017-11-02 11:20:11 +01:00
cdc-wdm.h
License cleanup: add SPDX license identifier to uapi header files with a license
2017-11-02 11:20:11 +01:00
cdc.h
License cleanup: add SPDX license identifier to uapi header files with no license
2017-11-02 11:19:54 +01:00
ch9.h
USB: core: Add type-specific length check of BOS descriptors
2017-11-28 15:17:49 +01:00
ch11.h
License cleanup: add SPDX license identifier to uapi header files with no license
2017-11-02 11:19:54 +01:00
charger.h
include: uapi: usb: Introduce USB charger type and state definition
2017-08-15 15:05:00 +03:00
functionfs.h
License cleanup: add SPDX license identifier to uapi header files with no license
2017-11-02 11:19:54 +01:00
g_printer.h
License cleanup: add SPDX license identifier to uapi header files with a license
2017-11-02 11:20:11 +01:00
gadgetfs.h
License cleanup: add SPDX license identifier to uapi header files with no license
2017-11-02 11:19:54 +01:00
midi.h
License cleanup: add SPDX license identifier to uapi header files with a license
2017-11-02 11:20:11 +01:00
tmc.h
License cleanup: add SPDX license identifier to uapi header files with no license
2017-11-02 11:19:54 +01:00
video.h
License cleanup: add SPDX license identifier to uapi header files with no license
2017-11-02 11:19:54 +01:00