Gerd Hoffmann 31fb4444a4 usb-ccid: add check message size checks ... Check message size too when figuring whenever we should expect more data. Fix debug message to show useful data, p->iov.size is fixed anyway if we land there, print how much we got meanwhile instead. Also check announced message size against actual message size. That is a more general fix for CVE-2017-5898 than commit "c7dfbf3 usb: ccid: check ccid apdu length". Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com> Message-id: 1487250819-23764-4-git-send-email-kraxel@redhat.com		2017-02-21 08:11:43 +01:00
..
bus.c	migration: Allow "device add" options to only add migratable devices	2017-01-24 17:54:47 +00:00
ccid-card-emulated.c	event_notifier: cleanups around event_notifier_set_handler	2017-01-16 17:52:35 +01:00
ccid-card-passthru.c	char: rename CharDriverState Chardev	2017-01-27 18:07:59 +01:00
ccid.h	usb: Change *_exitfn return type from int to void	2016-10-28 18:17:23 +03:00
combined-packet.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
core.c	usb: check RNDIS message length	2016-02-23 10:38:00 +01:00
desc-msos.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
desc.c	usb: accept usb3 control requests	2017-02-06 10:23:17 +01:00
desc.h	all: Clean up includes	2016-02-23 12:43:05 +00:00
dev-audio.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
dev-bluetooth.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
dev-hid.c	hw/usb/dev-hid: Improve guest compatibility of usb-tablet	2017-02-06 10:23:17 +01:00
dev-hub.c	include/qemu/osdep.h: Don't include qapi/error.h	2016-03-22 22:20:15 +01:00
dev-mtp.c	usb: Set category and description of the MTP device	2017-01-24 23:26:54 +03:00
dev-network.c	net: Use correct type for bool flag	2016-07-19 20:18:27 +02:00
dev-serial.c	char: rename CharDriverState Chardev	2017-01-27 18:07:59 +01:00
dev-smartcard-reader.c	usb-ccid: add check message size checks	2017-02-21 08:11:43 +01:00
dev-storage.c	block/qdev: Allow configuring WCE with qdev properties	2016-07-13 13:32:27 +02:00
dev-uas.c	usb/uas: more verbose error message	2017-02-06 10:23:17 +01:00
dev-wacom.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
hcd-ehci-pci.c	usb: ehci: fix memory leak in ehci	2017-02-21 08:11:42 +01:00
hcd-ehci-sysbus.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
hcd-ehci.c	usb: ehci: fix memory leak in ehci	2017-02-21 08:11:42 +01:00
hcd-ehci.h	usb: ehci: fix memory leak in ehci	2017-02-21 08:11:42 +01:00
hcd-musb.c	Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND	2016-03-22 22:20:17 +01:00
hcd-ohci.c	usb: ohci: limit the number of link eds	2017-02-21 08:11:42 +01:00
hcd-uhci.c	usb/uhci: move pid check	2016-04-25 12:05:05 +01:00
hcd-xhci.c	xhci: drop via vendor command handling	2017-02-21 08:11:43 +01:00
host-legacy.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
host-libusb.c	hw/ppc/spapr: Fix boot path of usb-host storage devices	2017-01-31 10:10:13 +11:00
host-stub.c	hw/ppc/spapr: Fix boot path of usb-host storage devices	2017-01-31 10:10:13 +11:00
host.h	usb-host: move legacy cmd line bits	2013-02-19 12:30:05 +01:00
libhw.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
Makefile.objs	xen: add pvUSB backend	2016-05-23 13:30:03 +02:00
quirks-ftdi-ids.h	usbredir: Add support for buffered bulk input (v2)	2013-01-08 10:56:58 +01:00
quirks-pl2303-ids.h	usbredir: Add support for buffered bulk input (v2)	2013-01-08 10:56:58 +01:00
quirks.c	usb: Clean up includes	2016-01-29 15:07:23 +00:00
quirks.h	usbredir: Add support for buffered bulk input (v2)	2013-01-08 10:56:58 +01:00
redirect.c	char: rename CharDriverState Chardev	2017-01-27 18:07:59 +01:00
trace-events	xhci: apply limits to loops	2017-02-21 08:11:43 +01:00
tusb6010.c	Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND	2016-03-22 22:20:17 +01:00
xen-usb.c	xen: attach pvusb usb bus to backend qdev	2016-11-22 10:29:41 -08:00