Masakazu Mokuno 81cf4a4536 USB: core: Add type-specific length check of BOS descriptors ...

As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.

This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.

Signed-off-by: Masakazu Mokuno <[email protected]>
Cc: stable <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>

2017-11-28 15:17:49 +01:00

..

audio.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

cdc-wdm.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

cdc.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

ch9.h

USB: core: Add type-specific length check of BOS descriptors

2017-11-28 15:17:49 +01:00

ch11.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

charger.h

include: uapi: usb: Introduce USB charger type and state definition

2017-08-15 15:05:00 +03:00

functionfs.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

g_printer.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

gadgetfs.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

midi.h

License cleanup: add SPDX license identifier to uapi header files with a license

2017-11-02 11:20:11 +01:00

tmc.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00

video.h

License cleanup: add SPDX license identifier to uapi header files with no license

2017-11-02 11:19:54 +01:00