Masakazu Mokuno 9d812f7bef USB: core: Add type-specific length check of BOS descriptors ... commit 81cf4a4536 upstream. As most of BOS descriptors are longer in length than their header 'struct usb_dev_cap_header', comparing solely with it is not sufficient to avoid out-of-bounds access to BOS descriptors. This patch adds descriptor type specific length check in usb_get_bos_descriptor() to fix the issue. Signed-off-by: Masakazu Mokuno <masakazu.mokuno@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-12-09 18:42:44 +01:00
..
asm-generic
drm	drm_fourcc: Fix DRM_FORMAT_MOD_LINEAR #define	2017-10-08 10:14:15 +02:00
linux	USB: core: Add type-specific length check of BOS descriptors	2017-12-09 18:42:44 +01:00
misc
mtd
rdma	Initial 4.4 merge window submission	2015-11-07 13:33:07 -08:00
scsi	cxlflash: Fix to avoid virtual LUN failover failure	2016-09-15 08:27:49 +02:00
sound
video
xen
Kbuild