linux

mirror of https://github.com/torvalds/linux.git synced 2026-06-09 07:03:37 +02:00

Linux kernel source tree

Go to file

Malte Leip 7df0d2c7d0 usb: usbip: fix isoc packet num validation in get_pipe commit `c409ca3be3` upstream. Change the validation of number_of_packets in get_pipe to compare the number of packets to a fixed maximum number of packets allowed, set to be 1024. This number was chosen due to it being used by other drivers as well, for example drivers/usb/host/uhci-q.c Background/reason: The get_pipe function in stub_rx.c validates the number of packets in isochronous mode and aborts with an error if that number is too large, in order to prevent malicious input from possibly triggering large memory allocations. This was previously done by checking whether pdu->u.cmd_submit.number_of_packets is bigger than the number of packets that would be needed for pdu->u.cmd_submit.transfer_buffer_length bytes if all except possibly the last packet had maximum length, given by usb_endpoint_maxp(epd) * usb_endpoint_maxp_mult(epd). This leads to an error if URBs with packets shorter than the maximum possible length are submitted, which is allowed according to Documentation/driver-api/usb/URB.rst and occurs for example with the snd-usb-audio driver. Fixes: `c6688ef9f2` ("usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input") Signed-off-by: Malte Leip <malte@leip.net> Cc: stable <stable@vger.kernel.org> Acked-by: Shuah Khan <skhan@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-05-08 07:21:43 +02:00
arch	KVM: nVMX: Fix size checks in vmx_set_nested_state	2019-05-05 14:42:41 +02:00
block	blk-iolatency: #include "blk.h"	2019-04-20 09:15:58 +02:00
certs	export.h: remove VMLINUX_SYMBOL() and VMLINUX_SYMBOL_STR()	2018-08-22 23:21:44 +09:00
crypto	crypto: x86/poly1305 - fix overflow during partial reduction	2019-04-27 09:36:37 +02:00
Documentation	i2c: i801: Add support for Intel Comet Lake	2019-05-04 09:20:15 +02:00
drivers	usb: usbip: fix isoc packet num validation in get_pipe	2019-05-08 07:21:43 +02:00
firmware	kbuild: remove all dummy assignments to obj-	2017-11-18 11:46:06 +09:00
fs	ceph: fix use-after-free on symlink traversal	2019-05-04 09:20:21 +02:00
include	i2c: Allow recovery of the initial IRQ by an I2C client device.	2019-05-08 07:21:43 +02:00
init	Revert "mm: use early_pfn_to_nid in page_ext_init"	2019-03-23 20:09:46 +01:00
ipc	ipc/shm.c: use ERR_CAST() for shm_lock() error return	2018-10-05 16:32:04 -07:00
kernel	ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK	2019-05-04 09:20:22 +02:00
lib	lib/Kconfig.debug: fix build error without CONFIG_BLOCK	2019-05-02 09:58:53 +02:00
LICENSES	LICENSES: Remove CC-BY-SA-4.0 license text	2018-10-18 11:28:50 +02:00
mm	mm: prevent get_user_pages() from overflowing page refcount	2019-05-04 09:20:11 +02:00
net	mac80211: don't attempt to rename ERR_PTR() debugfs dirs	2019-05-08 07:21:42 +02:00
samples	samples: mei: use /dev/mei0 instead of /dev/mei	2019-02-15 08:10:11 +01:00
scripts	kconfig/[mn]conf: handle backspace (^H) key	2019-05-04 09:20:22 +02:00
security	selinux: use kernel linux/socket.h for genheaders and mdp	2019-05-04 09:20:10 +02:00
sound	ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR	2019-05-08 07:21:43 +02:00
tools	selftests: fib_rule_tests: print the result and return 1 if any tests failed	2019-05-05 14:42:39 +02:00
usr	initramfs: move gen_initramfs_list.sh from scripts/ to usr/	2018-08-22 23:21:44 +09:00
virt	KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots	2019-05-04 09:20:14 +02:00
.clang-format	clang-format: Set IndentWrappedFunctionNames false	2018-08-01 18:38:51 +02:00
.cocciconfig
.get_maintainer.ignore
.gitattributes	.gitattributes: set git diff driver for C source code files	2016-10-07 18:46:30 -07:00
.gitignore	Kbuild updates for v4.17 (2nd)	2018-04-15 17:21:30 -07:00
.mailmap	libnvdimm-for-4.19_misc	2018-08-25 18:13:10 -07:00
COPYING	COPYING: use the new text with points to the license files	2018-03-23 12:41:45 -06:00
CREDITS	9p: remove Ron Minnich from MAINTAINERS	2018-08-17 16:20:26 -07:00
Kbuild	Kbuild updates for v4.15	2017-11-17 17:45:29 -08:00
Kconfig	kconfig: move the "Executable file formats" menu to fs/Kconfig.binfmt	2018-08-02 08:06:55 +09:00
MAINTAINERS	platform/x86: Add Intel AtomISP2 dummy / power-management driver	2019-04-20 09:16:02 +02:00
Makefile	Linux 4.19.40	2019-05-05 14:42:41 +02:00
README	Docs: Added a pointer to the formatted docs to README	2018-03-21 09:02:53 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.
See Documentation/00-INDEX for a list of what is contained in each file.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.