Greg Kroah-Hartman
13713e63bd
USB: fix out-of-bounds in usb_set_configuration
...
commit bd7a3fe770 upstream.
Andrey Konovalov reported a possible out-of-bounds problem for a USB interface
association descriptor. He writes:
It seems there's no proper size check of a USB_DT_INTERFACE_ASSOCIATION
descriptor. It's only checked that the size is >= 2 in
usb_parse_configuration(), so find_iad() might do out-of-bounds access
to intf_assoc->bInterfaceCount.
And he's right, we don't check for crazy descriptors of this type very well, so
resolve this problem. Yet another issue found by syzkaller...
Reported-by: Andrey Konovalov <andreyknvl@google.com >
Tested-by: Andrey Konovalov <andreyknvl@google.com >
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org >
2017-10-12 11:27:33 +02:00
..
2015-10-13 17:42:34 +02:00
2015-09-23 20:23:25 +01:00
2015-10-26 16:00:00 +01:00
2015-10-05 17:32:14 +02:00
2015-08-26 20:32:35 +02:00
2015-11-01 13:48:26 +11:00
2017-10-12 11:27:33 +02:00
2015-10-05 03:16:46 -07:00
2015-09-08 13:34:59 -07:00
2015-09-29 13:37:04 -07:00
2015-11-02 22:48:39 -05:00
2015-10-26 19:38:30 -07:00
2016-12-15 08:49:22 -08:00
2015-08-25 14:41:50 -05:00
2015-10-31 19:05:59 -04:00
2015-09-10 06:54:15 +02:00
2015-10-17 16:15:18 -04:00
2016-09-15 08:27:40 +02:00
2015-10-23 23:26:43 +02:00
2015-09-23 08:44:22 +02:00
2015-09-29 13:36:06 -07:00
2015-09-09 22:06:29 -07:00
2015-10-30 12:10:51 +09:00
2015-08-17 14:22:48 -07:00
2015-08-10 14:03:54 -07:00
2016-05-18 17:06:43 -07:00
2015-08-17 21:33:06 -07:00
2015-10-16 15:32:05 -07:00
2015-10-26 19:06:48 -07:00
2015-08-21 09:10:11 -07:00
2017-05-02 21:19:53 -07:00
2015-08-13 21:27:19 -07:00
2016-03-03 15:07:24 -08:00
2015-09-10 13:29:01 -07:00
2015-10-01 15:06:31 +02:00
2016-06-24 10:18:17 -07:00
2015-10-29 16:21:42 +09:00
2015-09-23 11:01:16 -06:00
2015-09-24 14:31:37 -07:00
2015-11-02 22:48:39 -05:00
2015-09-11 15:21:34 -07:00
2015-10-04 12:54:54 +01:00
2015-08-10 13:46:21 -07:00
2017-03-22 12:04:13 +01:00
2017-03-22 12:04:13 +01:00
2015-10-27 03:55:10 +01:00
2015-08-27 19:44:53 -04:00
2015-11-23 21:53:08 -05:00
2015-10-13 10:35:26 +02:00
2015-10-09 10:40:37 -06:00
2015-12-14 14:00:09 -05:00
2017-03-22 12:04:16 +01:00
2015-10-29 17:35:40 -05:00
2015-11-04 09:41:05 -08:00
2015-09-17 21:09:07 -07:00
2015-10-21 14:46:56 -06:00
2015-09-04 16:54:41 -07:00
2015-10-02 14:35:17 +01:00
2015-10-27 19:55:13 -07:00
2016-11-15 07:46:38 +01:00
2015-10-04 12:54:54 +01:00
2015-10-12 14:20:06 +01:00
2015-09-04 16:54:41 -07:00
2015-10-04 20:28:58 +01:00
2015-09-11 00:32:36 -07:00
2015-10-01 21:42:35 -04:00
2015-10-27 18:55:31 -07:00
2015-10-20 15:37:56 -02:00
2016-05-04 14:48:48 -07:00
2015-12-04 08:38:42 -07:00
2016-09-15 08:27:45 +02:00
2015-10-16 10:44:02 +02:00