Oliver Neukum b5b60b9a16 usbnet: sanity checking of packet sizes and device mtu ...

[ Upstream commit 280ceaed79 ]

After a reset packet sizes and device mtu can change and need
to be reevaluated to calculate queue sizes.
Malicious devices can set this to zero and we divide by it.
Introduce sanity checking.

Reported-and-tested-by:  syzbot+6102c120be558c885f04@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 14:32:34 +09:00

..

asix_common.c

asix: Check for supported Wake-on-LAN modes

2023-05-15 09:11:52 +09:00

asix_devices.c

net: usb: asix: init MAC address buffers

2023-05-15 14:01:30 +09:00

asix.h

net: asix: Add in_pm parameter

2016-08-31 21:07:05 -07:00

ax88172a.c

net: asix: Add in_pm parameter

2016-08-31 21:07:05 -07:00

ax88179_178a.c

ax88179_178a: Check for supported Wake-on-LAN modes

2023-05-15 09:11:53 +09:00

catc.c

catc: Use heap buffer for memory size test

2017-02-18 15:11:42 +01:00

cdc_eem.c

drivers/net: delete non-required instances of include <linux/init.h>

2014-01-16 11:53:26 -08:00

cdc_ether.c

cdc_ether: fix rndis support for Mediatek based smartphones

2023-05-15 14:29:22 +09:00

cdc_mbim.c

net: usb: cdc_mbim: add flag FLAG_SEND_ZLP

2018-06-13 16:16:42 +02:00

cdc_ncm.c

cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize

2023-05-15 14:32:19 +09:00

cdc_subset.c

cdc_subset: deal with a device that needs reset for timeout

2014-08-02 15:44:18 -07:00

cdc-phonet.c

cdc-phonet: use common parser

2015-09-15 12:43:49 -07:00

ch9200.c

ch9200: use skb_cow_head() to deal with cloned skbs

2023-05-15 11:34:41 +09:00

cx82310_eth.c

cx82310_eth: fix a memory leak bug

2023-05-15 14:28:24 +09:00

dm9601.c

drivers/net: get rid of unnecessary initializations in .get_drvinfo()

2015-10-16 00:24:10 -07:00

gl620a.c

usbnet: remove generic hard_header_len check

2014-02-17 14:35:46 -05:00

hso.c

USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data

2023-05-15 10:45:17 +09:00

huawei_cdc_ncm.c

cdc_ncm: Set NTB format again after altsetting switch for Huawei devices

2017-11-15 15:53:17 +01:00

int51x1.c

usb: Fix FSF address in file headers

2013-12-06 12:37:55 -05:00

ipheth.c

usbnet: ipheth: fix racing condition

2023-05-15 13:49:06 +09:00

kalmia.c

net: kalmia: fix memory leaks

2023-05-15 14:28:25 +09:00

kaweth.c

kaweth: use skb_cow_head() to deal with cloned skbs

2023-05-15 11:34:42 +09:00

Kconfig

usb: plusb: Add support for PL-27A1

2017-10-08 10:26:08 +02:00

lan78xx.c

lan78xx: Resolve issue with changing MAC address

2023-05-15 10:54:32 +09:00

lan78xx.h

lan78xx: replace devid to chipid & chiprev

2016-02-29 17:12:07 -05:00

lg-vl600.c

net: usb: Use eth_<foo>_addr instead of memset

2015-03-03 17:01:36 -05:00

Makefile

USB: cdc_subset: only build when one driver is enabled

2016-02-18 15:59:45 -05:00

mcs7830.c

drivers/net: get rid of unnecessary initializations in .get_drvinfo()

2015-10-16 00:24:10 -07:00

net1080.c

usbnet: remove generic hard_header_len check

2014-02-17 14:35:46 -05:00

pegasus.c

net: usb: pegasus: fix improper read if get_registers() fail

2023-05-15 14:18:49 +09:00

pegasus.h

drivers: net: usb: pegasus: fix control urb submission

2013-04-29 13:57:50 -04:00

plusb.c

usb: plusb: Add support for PL-27A1

2017-10-08 10:26:08 +02:00

qmi_wwan.c

net: usb: qmi_wwan: Add the BroadMobi BM818 card

2023-05-15 14:20:34 +09:00

r8152.c

r8152: Set memory to all 0xFFs on failed reg reads

2023-05-15 14:30:51 +09:00

rndis_host.c

rndis_host: Set valid random MAC on buggy devices

2016-07-16 20:03:04 -07:00

rtl8150.c

net: usb: rtl8150: demote allmulti message to dev_dbg()

2023-05-12 17:07:29 +09:00

sierra_net.c

sierra_net: Add support for IPv6 and Dual-Stack Link Sense Indications

2017-06-17 06:41:50 +02:00

smsc75xx.c

smsc75xx: Check for Wake-on-LAN modes

2023-05-15 09:11:56 +09:00

smsc75xx.h

usb: Fix FSF address in file headers

2013-12-06 12:37:55 -05:00

smsc95xx.c

smsc95xx: Use skb_cow_head to deal with cloned skbs

2023-05-15 11:34:40 +09:00

smsc95xx.h

smsc95xx: Add register define

2016-09-06 13:28:10 -07:00

sr9700.c

sr9700: use skb_cow_head() to deal with cloned skbs

2018-01-17 09:38:52 +01:00

sr9700.h

net: usb: sr9700: Use 'SR_' prefix for the common register macros

2015-02-04 13:53:02 -08:00

sr9800.c

sr9800: Check for supported Wake-on-LAN modes

2023-05-15 09:11:54 +09:00

sr9800.h

USB2NET : SR9800 : One chip USB2.0 USB2NET SR9800 Device Driver Support

2014-02-10 16:53:06 -08:00

usbnet.c

usbnet: sanity checking of packet sizes and device mtu

2023-05-15 14:32:34 +09:00

zaurus.c

drivers/net: delete non-required instances of include <linux/init.h>

2014-01-16 11:53:26 -08:00