linux-stable/drivers/bluetooth
Johan Hovold fd7f0b4469 Bluetooth: bfusb: fix division by zero in send path
commit b5e6fa7a12 upstream.

Add the missing bulk-out endpoint sanity check to probe() to avoid
division by zero in bfusb_send_frame() in case a malicious device has
broken descriptors (or when doing descriptor fuzz testing).

Note that USB core will reject URBs submitted for endpoints with zero
wMaxPacketSize but that drivers doing packet-size calculations still
need to handle this (cf. commit 2548288b4f ("USB: Fix: Don't skip
endpoint descriptors with maxpacket=0")).

Cc: stable@vger.kernel.org
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-01-27 09:00:46 +01:00
..
ath3k.c
bcm203x.c
bfusb.c Bluetooth: bfusb: fix division by zero in send path 2022-01-27 09:00:46 +01:00
bluecard_cs.c
bpa10x.c
bt3c_cs.c
btbcm.c Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth 2018-11-13 11:14:54 -08:00
btbcm.h
btintel.c
btintel.h
btmrvl_debugfs.c
btmrvl_drv.h
btmrvl_main.c
btmrvl_sdio.c
btmrvl_sdio.h
btqca.c Bluetooth: btqca: Add a short delay before downloading the NVM 2019-09-10 10:32:13 +01:00
btqca.h
btqcomsmd.c Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function 2021-03-03 18:22:37 +01:00
btrtl.c
btrtl.h
btsdio.c
btuart_cs.c
btusb.c Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models 2022-01-11 13:57:34 +01:00
btwilink.c
dtl1_cs.c
hci_ag6xx.c
hci_ath.c Bluetooth: hci_uart: check for missing tty operations 2019-08-04 09:32:02 +02:00
hci_bcm.c Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading 2019-12-05 15:37:37 +01:00
hci_bcsp.c Bluetooth: Fix invalid-free in bcsp_close() 2019-12-01 09:14:15 +01:00
hci_h4.c Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf() 2019-03-27 14:13:53 +09:00
hci_h5.c
hci_intel.c Bluetooth: hci_uart: check for missing tty operations 2019-08-04 09:32:02 +02:00
hci_ldisc.c Bluetooth: hci_uart: Cancel init work before unregistering 2020-10-29 09:07:03 +01:00
hci_ll.c
hci_mrvl.c Bluetooth: hci_uart: check for missing tty operations 2019-08-04 09:32:02 +02:00
hci_nokia.c
hci_qca.c
hci_serdev.c Bluetooth: hci_uart: Cancel init work before unregistering 2020-10-29 09:07:03 +01:00
hci_uart.h Bluetooth: hci_uart: check for missing tty operations 2019-08-04 09:32:02 +02:00
hci_vhci.c
Kconfig
Makefile