Tobias Herzog d22b933fb8 cdc-acm: fix possible invalid access when processing notification ...

commit 1bb9914e1730417d530de9ed37e59efdc647146b upstream.

Notifications may only be 8 bytes long. Accessing the 9th and
10th byte of unimplemented/unknown notifications may be insecure.
Also check the length of known notifications before accessing anything
behind the 8th byte.

Signed-off-by: Tobias Herzog <t-herzog@gmx.de>
Acked-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-05-25 14:30:10 +02:00

..

cdc-acm.c

cdc-acm: fix possible invalid access when processing notification

2017-05-25 14:30:10 +02:00

cdc-acm.h

cdc-acm: fix wrong pipe type on rx interrupt xfers

2016-09-07 08:32:43 +02:00

cdc-wdm.c

cdc-wdm: error returns need to be translated

2015-03-26 10:51:57 +01:00

Kconfig

…

Makefile

…

usblp.c

usblp: do not set TASK_INTERRUPTIBLE before lock

2015-11-19 16:31:42 -08:00

usbtmc.c

USB: usbtmc: add missing endpoint sanity check

2017-03-30 09:35:19 +02:00