p71924506
/
linux_old1
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
linux_old1/drivers/usb/serial
History
Johan Hovold 8c76d7cd52 USB: serial: safe_serial: fix information leak in completion handler 
Add missing sanity check to the bulk-in completion handler to avoid an
integer underflow that could be triggered by a malicious device.

This avoids leaking up to 56 bytes from after the URB transfer buffer to
user space.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
 		2017-03-08 16:14:42 +01:00
..
Kconfig USB: serial: add uPD78F0730 USB to Serial Adaptor Driver 2017-01-26 10:18:17 +01:00
Makefile USB: serial: add uPD78F0730 USB to Serial Adaptor Driver 2017-01-26 10:18:17 +01:00
Makefile-keyspan_pda_fw
…
aircable.c
…
ark3116.c USB: serial: ark3116: use port device for info and error messages 2017-01-31 17:21:38 +01:00
belkin_sa.c
…
belkin_sa.h
…
bus.c USB: serial: clean up bus probe error handling 2015-02-26 17:13:05 +01:00
ch341.c USB: serial: ch341: change initial line-control settings 2017-01-16 12:32:21 +01:00
console.c USB: serial: console: clean up sanity checks 2017-02-08 21:20:49 +01:00
cp210x.c USB/PHY patches for 4.11-rc1 2017-02-22 11:15:59 -08:00
cyberjack.c USB: serial: cyberjack: fix NULL-deref at open 2017-01-04 10:37:14 +01:00
cypress_m8.c USB: serial: cypress_m8: remove unused variable 2017-01-16 12:26:58 +01:00
cypress_m8.h
…
digi_acceleport.c USB: serial: digi_acceleport: fix OOB-event processing 2017-03-06 09:18:40 +01:00
empeg.c
…
ezusb_convert.pl
…
f81232.c USB: f81232: fix some minor style issues 2015-03-27 17:36:29 +01:00
f81534.c USB: serial: f81534: detect errors from f81534_logic_to_phy_port() 2017-01-02 10:31:08 +01:00
ftdi_sio.c USB: serial: ftdi_sio: fix line-status over-reporting 2017-02-06 18:29:06 +01:00
ftdi_sio.h USB: serial: fix compare_const_fl.cocci warnings 2016-02-28 14:35:58 +01:00
ftdi_sio_ids.h USB: serial: ftdi_sio: add support for TI CC3200 LaunchPad 2016-11-07 10:23:03 +01:00
garmin_gps.c USB: serial: garmin_gps: fix memory leak on failed URB submit 2017-01-04 10:37:15 +01:00
generic.c sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h> 2017-03-02 08:42:32 +01:00
io_16654.h
…
io_edgeport.c USB: serial: io_edgeport: drop io-tables header file 2017-02-15 17:42:05 +01:00
io_edgeport.h
…
io_ionsp.h
…
io_ti.c USB: serial: io_ti: fix information leak in completion handler 2017-03-08 16:14:39 +01:00
io_ti.h
…
io_usbvend.h USB: io_ti: fix firmware download on big-endian machines (part 2) 2014-05-27 15:12:57 -07:00
ipaq.c USB: ipaq.c: fix a timeout loop 2015-12-18 09:30:34 -08:00
ipw.c
…
ir-usb.c
…
iuu_phoenix.c USB: serial: iuu_phoenix: remove unused buffer from open 2017-01-16 16:38:56 +01:00
iuu_phoenix.h
…
keyspan.c USB: serial: keyspan: drop header file 2017-02-15 17:42:28 +01:00
keyspan_pda.c USB: serial: keyspan_pda: fix receive sanity checks 2017-01-31 18:33:00 +01:00
keyspan_usa26msg.h
…
keyspan_usa28msg.h
…
keyspan_usa49msg.h
…
keyspan_usa67msg.h
…
keyspan_usa90msg.h
…
kl5kusb105.c USB: serial: kl5kusb105: remove unused termios structure 2017-01-16 13:00:22 +01:00
kl5kusb105.h
…
kobil_sct.c USB: serial: kobil_sct: fix NULL-deref in write 2017-01-04 10:37:18 +01:00
kobil_sct.h
…
mct_u232.c USB: serial: mct_u232: fix modem-status error handling 2017-01-16 16:38:56 +01:00
mct_u232.h
…
metro-usb.c USB: serial: metro-usb: drop redundant URB reinitialisation 2017-02-08 19:28:02 +01:00
mos7720.c USB: serial: drop unused ASYNC flags 2017-01-26 09:49:13 +01:00
mos7840.c USB: serial: mos7840: fix another NULL-deref at open 2017-02-09 13:15:07 +01:00
mxuport.c USB patches for 4.7-rc1 2016-05-20 21:12:25 -07:00
navman.c
…
omninet.c USB: serial: omninet: drop open callback 2017-03-08 16:14:37 +01:00
opticon.c USB: serial: drop unused ASYNC flags 2017-01-26 09:49:13 +01:00
option.c USB: serial: option: add device ID for HP lt2523 (Novatel E371) 2017-01-24 12:07:28 +01:00
oti6858.c USB: serial: oti6858: fix NULL-deref at open 2017-01-04 10:43:48 +01:00
oti6858.h
…
pl2303.c USB-serial updates for v4.11-rc1 2017-02-09 13:57:05 +01:00
pl2303.h USB: serial: pl2303: add ATEN device ID 2017-01-31 17:27:04 +01:00
qcaux.c
…
qcserial.c USB: serial: qcserial: add Dell DW5570 QDL 2017-01-19 09:08:37 +01:00
quatech2.c USB: serial: drop unused ASYNC flags 2017-01-26 09:49:13 +01:00
safe_serial.c USB: serial: safe_serial: fix information leak in completion handler 2017-03-08 16:14:42 +01:00
sierra.c USB: serial: sierra: fix bogus alternate-setting assumption 2017-02-06 18:29:17 +01:00
spcp8x5.c USB: serial: spcp8x5: fix modem-status handling 2017-01-16 16:38:56 +01:00
ssu100.c USB: serial: drop unused ASYNC flags 2017-01-26 09:49:13 +01:00
symbolserial.c USB: symbolserial: Correct transferred data size 2015-08-18 10:06:22 -07:00
ti_usb_3410_5052.c USB: serial: ti_usb_3410_5052: fix control-message error handling 2017-01-16 16:38:57 +01:00
upd78f0730.c USB: serial: upd78f0730: sort device ids 2017-02-13 14:50:44 +01:00
usb-serial-simple.c USB: serial: simple: add support for another Infineon flashloader 2016-09-12 10:19:41 +02:00
usb-serial.c USB: serial: fix potential NULL-dereference at probe 2016-10-21 16:47:17 +02:00
usb-wwan.h USB: usb_wwan/option: generalize option_send_setup for other drivers 2015-10-09 12:42:40 +02:00
usb_debug.c
…
usb_wwan.c USB: serial: fix invalid user-pointer checks 2016-11-11 17:54:04 +01:00
visor.c USB: serial: visor: fix crash on detecting device without write_urbs 2016-01-25 11:40:45 +01:00
visor.h
…
whiteheat.c USB: serial: drop unused ASYNC flags 2017-01-26 09:49:13 +01:00
whiteheat.h
…
wishbone-serial.c
…
xsens_mt.c usb: serial: xsens_mt: always bind to interface number 1 2014-09-04 11:18:26 +02:00