Tobias Herzog 809ae061d9 cdc-acm: fix possible invalid access when processing notification ...

commit 1bb9914e17 upstream.

Notifications may only be 8 bytes long. Accessing the 9th and
10th byte of unimplemented/unknown notifications may be insecure.
Also check the length of known notifications before accessing anything
behind the 8th byte.

Signed-off-by: Tobias Herzog <t-herzog@gmx.de>
Acked-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-05-25 15:44:36 +02:00

..

cdc-acm.c

cdc-acm: fix possible invalid access when processing notification

2017-05-25 15:44:36 +02:00

cdc-acm.h

cdc-acm: fix wrong pipe type on rx interrupt xfers

2016-08-15 16:30:56 +02:00

cdc-wdm.c

USB: Revert "cdc-wdm: fix "out-of-sync" due to missing notifications"

2017-05-20 14:28:34 +02:00

Kconfig

USB: regroup all depends on USB within an if USB block

2013-04-09 16:49:07 -07:00

Makefile

USB: add USB test and measurement class driver

2008-10-17 14:40:51 -07:00

usblp.c

usblp: do not set TASK_INTERRUPTIBLE before lock

2015-11-19 16:31:42 -08:00

usbtmc.c

USB: usbtmc: fix probe error path

2017-03-30 09:41:24 +02:00