James Forshaw d0e6e29e2c USB: whiteheat: Added bounds checking for bulk command response ...

commit 6817ae225c upstream.

This patch fixes a potential security issue in the whiteheat USB driver
which might allow a local attacker to cause kernel memory corrpution. This
is due to an unchecked memcpy into a fixed size buffer (of 64 bytes). On
EHCI and XHCI busses it's possible to craft responses greater than 64
bytes leading a buffer overflow.

Signed-off-by: James Forshaw <forshaw@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-09-05 16:28:37 -07:00

..

aircable.c

TTY: switch tty_flip_buffer_push

2013-01-15 22:30:15 -08:00

ark3116.c

USB: ark3116: fix control-message timeout

2013-05-29 10:50:43 +09:00

belkin_sa.c

TTY: switch tty_flip_buffer_push

2013-01-15 22:30:15 -08:00

belkin_sa.h

…

bus.c

USB: serial: fix potential runtime pm imbalance at device remove

2014-06-30 20:09:44 -07:00

ch341.c

USB: ch341: fix TIOCMIWAIT and disconnect

2013-03-25 13:50:52 -07:00

console.c

Merge tag 'usb-3.6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2012-10-01 13:23:01 -07:00

cp210x.c

USB: cp210x: add support for Corsair usb dongle

2014-07-17 15:57:59 -07:00

cyberjack.c

USB: cyberjack: fix disconnect handling

2013-03-25 13:48:26 -07:00

cypress_m8.c

USB: Serial: cypress_M8: Enable FRWD Dongle hidcom device

2013-06-03 10:33:10 -07:00

cypress_m8.h

USB: cypress_m8: fix ring-indicator detection and reporting

2014-02-06 11:08:12 -08:00

digi_acceleport.c

Merge tag 'usb-3.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2013-04-29 12:19:23 -07:00

empeg.c

USB: serial: remove driver version information

2012-10-31 12:48:06 -07:00

ezusb_convert.pl

…

f81232.c

USB: f81232: fix device initialisation at open

2013-06-10 11:00:48 -07:00

ftdi_sio_ids.h

USB: ftdi_sio: Added PID for new ekey device

2014-09-05 16:28:37 -07:00

ftdi_sio.c

USB: ftdi_sio: Added PID for new ekey device

2014-09-05 16:28:37 -07:00

ftdi_sio.h

USB: ftdi_sio: add support for FT-X series devices

2012-03-14 15:43:05 -07:00

funsoft.c

USB: serial: funsoft.c: remove debug module parameter

2012-09-14 12:31:27 -07:00

garmin_gps.c

USB: garmin_gps: remove bogus disconnect test in bulk callback

2013-03-25 13:54:32 -07:00

generic.c

USB: serial: fix race in generic write

2014-01-09 12:24:19 -08:00

hp4x.c

USB: serial: remove driver version information

2012-10-31 12:48:06 -07:00

io_16654.h

…

io_edgeport.c

Merge tag 'usb-3.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2013-04-29 12:19:23 -07:00

io_edgeport.h

…

io_ionsp.h

…

io_tables.h

USB: io_edgeport: switch to generic TIOCMIWAIT implementation

2013-03-25 13:50:53 -07:00

io_ti.c

USB: io_ti: fix firmware download on big-endian machines (part 2)

2014-06-11 12:03:26 -07:00

io_ti.h

…

io_usbvend.h

USB: io_ti: fix firmware download on big-endian machines (part 2)

2014-06-11 12:03:26 -07:00

ipaq.c

USB: serial: remove driver version information

2012-10-31 12:48:06 -07:00

ipw.c

USB: serial: remove driver version information

2012-10-31 12:48:06 -07:00

ir-usb.c

TTY: switch tty_flip_buffer_push

2013-01-15 22:30:15 -08:00

iuu_phoenix.c

USB: iuu_phoenix: fix bulk-message timeout

2013-05-29 10:50:43 +09:00

iuu_phoenix.h

…

Kconfig

usb-serial: add support for USB Wishbone-serial adapters

2013-04-11 08:41:56 -07:00

keyspan_pda.c

Merge tag 'usb-3.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2013-04-29 12:19:23 -07:00

keyspan_usa26msg.h

…

keyspan_usa28msg.h

…

keyspan_usa49msg.h

…

keyspan_usa67msg.h

…

keyspan_usa90msg.h

…

keyspan.c

USB: keyspan: fix null-deref at disconnect and release

2013-08-20 08:43:04 -07:00

keyspan.h

USB: keyspan: fix NULL-pointer dereferences and memory leaks

2012-10-25 09:37:13 -07:00

kl5kusb105.c

USB: kl5kusb105: always disable uart on close

2013-03-25 13:54:31 -07:00

kl5kusb105.h

…

kobil_sct.c

USB: kobil_sct: use port interrupt-out urb

2013-04-17 10:05:35 -07:00

kobil_sct.h

…

Makefile

usb-serial: add support for USB Wishbone-serial adapters

2013-04-11 08:41:56 -07:00

Makefile-keyspan_pda_fw

…

mct_u232.c

USB: mct_u232: clean up read implementation

2013-04-17 10:05:35 -07:00

mct_u232.h

…

metro-usb.c

USB: metro-usb: always disable uart on close

2013-03-25 13:54:31 -07:00

mos7720.c

USB: mos7720: fix big-endian control requests

2013-09-26 17:18:06 -07:00

mos7840.c

USB: mos7840: correct handling of CS5 setting

2013-12-11 22:36:28 -08:00

moto_modem.c

USB: serial: rework usb_serial_register/deregister_drivers()

2012-05-08 15:46:14 -07:00

navman.c

TTY: switch tty_flip_buffer_push

2013-01-15 22:30:15 -08:00

omninet.c

USB: omninet: switch to generic read implementation

2013-04-17 10:05:34 -07:00

opticon.c

USB: opticon: remove disconnect test from tiocmset

2013-03-25 13:54:31 -07:00

option.c

usb: option: Add ID for Telewell TW-LTE 4G v2

2014-07-17 15:57:59 -07:00

oti6858.c

USB: oti6858: fix TIOCMIWAIT and disconnect

2013-03-25 13:52:25 -07:00

oti6858.h

…

pl2303.c

USB: pl2303: add ids for Hewlett-Packard HP POS pole displays

2014-05-06 07:55:33 -07:00

pl2303.h

USB: pl2303: add ids for Hewlett-Packard HP POS pole displays

2014-05-06 07:55:33 -07:00

qcaux.c

qcaux: add Franklin U600

2013-03-11 11:09:17 -07:00

qcserial.c

usb: qcserial: add additional Sierra Wireless QMI devices

2014-06-30 20:09:43 -07:00

quatech2.c

Merge tag 'usb-3.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2013-04-29 12:19:23 -07:00

safe_serial.c

TTY: switch tty_flip_buffer_push

2013-01-15 22:30:15 -08:00

siemens_mpi.c

USB: serial: remove driver version information

2012-10-31 12:48:06 -07:00

sierra.c

USB: sierra: fix remote wakeup

2014-06-30 20:09:43 -07:00

spcp8x5.c

USB: spcp8x5: correct handling of CS5 setting

2013-12-11 22:36:28 -08:00

ssu100.c

USB: ssu100: switch to generic TIOCMIWAIT implementation

2013-03-25 13:52:28 -07:00

symbolserial.c

USB: symbolserial: move private-data allocation to port_probe

2013-04-17 10:05:35 -07:00

ti_usb_3410_5052.c

USB: serial: ti_usb_3410_5052: add Abbott strip port ID to combined table as well.

2013-11-04 04:31:06 -08:00

ti_usb_3410_5052.h

USB: serial: ti_usb_3410_5052: new device id for Abbot strip port cable

2013-06-19 15:54:45 -07:00

usb_debug.c

USB: serial: rework usb_serial_register/deregister_drivers()

2012-05-08 15:46:14 -07:00

usb_wwan.c

USB: usb_wwan: fix potential blocked I/O after resume

2014-06-30 20:09:43 -07:00

usb-serial.c

USB: serial: fix sysfs-attribute removal deadlock

2014-05-30 21:52:13 -07:00

usb-wwan.h

USB: usb-wwan: fix multiple memory leaks in error paths

2012-10-25 09:37:13 -07:00

visor.c

USB: visor: fix initialisation of Treo/Kyocera devices

2013-05-29 10:47:45 +09:00

visor.h

…

vivopay-serial.c

USB: serial: remove driver version information

2012-10-31 12:48:06 -07:00

whiteheat.c

USB: whiteheat: Added bounds checking for bulk command response

2014-09-05 16:28:37 -07:00

whiteheat.h

…

wishbone-serial.c

USB: serial: wishbone-serial: fix up minor sparse warning

2013-04-11 08:45:34 -07:00

xsens_mt.c

usb: add driver for xsens motion trackers

2013-01-25 09:56:54 -08:00

zio.c

USB: serial: rework usb_serial_register/deregister_drivers()

2012-05-08 15:46:14 -07:00

zte_ev.c

usb: serial: zte_ev: move support for ZTE AC2726 from zte_ev back to option

2014-01-09 12:24:20 -08:00