linux-stable/drivers/usb/gadget
Brooke Basile 2b74b0a04d USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
Some values extracted by ncm_unwrap_ntb() could possibly lead to several
different out of bounds reads of memory.  Specifically the values passed
to netdev_alloc_skb_ip_align() need to be checked so that memory is not
overflowed.

Resolve this by applying bounds checking to a number of different
indexes and lengths of the structure parsing logic.

Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Brooke Basile <brookebasile@gmail.com>
Acked-by: Felipe Balbi <balbi@kernel.org>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-08-25 16:02:32 +02:00
..
function USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() 2020-08-25 16:02:32 +02:00
legacy usb: gadget: Use fallthrough pseudo-keyword 2020-07-10 08:55:18 +02:00
udc USB/Thunderbolt patches for 5.9-rc1 2020-08-05 12:13:10 -07:00
composite.c usb: gadget: Use fallthrough pseudo-keyword 2020-07-10 08:55:18 +02:00
config.c
configfs.c USB: replace hardcode maximum usb string length by definition 2020-06-18 16:07:57 +02:00
configfs.h
epautoconf.c usb: gadget: move non-super speed code out of usb_ep_autoconfig_ss() 2019-02-07 13:14:51 +02:00
functions.c
Kconfig USB: Fix up terminology 2020-07-01 14:04:04 +02:00
Makefile Revert "usb:gadget Separated decoding functions from dwc3 driver." 2019-07-04 13:02:09 +02:00
u_f.c usb: gadget: Change Andrzej Pietrasiewicz's e-mail address 2019-02-11 11:12:29 +02:00
u_f.h USB: gadget: u_f: add overflow checks to VLA macros 2020-08-25 16:02:29 +02:00
u_os_desc.h usb: gadget: Change Andrzej Pietrasiewicz's e-mail address 2019-02-11 11:12:29 +02:00
usbstring.c usb: gadget: fix langid kernel-doc warning in usbstring.c 2020-07-09 10:13:07 +03:00