Masakazu Mokuno 81cf4a4536 USB: core: Add type-specific length check of BOS descriptors ...

As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.

This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.

Signed-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-11-28 15:17:49 +01:00

..

audio.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

cdc-wdm.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

cdc.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

ch9.h

USB: core: Add type-specific length check of BOS descriptors

2017-11-28 15:17:49 +01:00

ch11.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

charger.h

include: uapi: usb: Introduce USB charger type and state definition

2017-08-15 15:05:00 +03:00

functionfs.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

g_printer.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

gadgetfs.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

midi.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

tmc.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

video.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00