Files
linux/include/uapi/linux
Masakazu Mokuno 9d812f7bef USB: core: Add type-specific length check of BOS descriptors
commit 81cf4a45360f70528f1f64ba018d61cb5767249a upstream.

As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.

This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.

Signed-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-12-09 18:42:44 +01:00
..
2015-10-13 17:42:34 +02:00
2015-04-21 16:16:02 -04:00
2015-10-05 03:16:46 -07:00
2017-12-05 11:22:51 +01:00
2015-08-25 14:41:50 -05:00
2015-07-01 16:26:08 +02:00
2015-10-26 19:06:48 -07:00
2015-08-03 17:30:00 -07:00
2015-07-21 10:39:05 -07:00
2015-05-05 13:40:44 -06:00
2015-08-27 19:44:53 -04:00
2015-04-23 15:16:14 -04:00
2015-07-20 14:58:46 -04:00
2015-09-17 21:09:07 -07:00
2015-09-04 16:54:41 -07:00
2015-05-24 12:49:16 -07:00
2015-06-11 23:37:37 +02:00
2015-10-27 18:55:31 -07:00
2015-12-04 08:38:42 -07:00
2015-10-16 10:44:02 +02:00
2015-06-03 14:17:38 +02:00