Greg Kroah-Hartman bd7a3fe770 USB: fix out-of-bounds in usb_set_configuration ... Andrey Konovalov reported a possible out-of-bounds problem for a USB interface association descriptor. He writes: It seems there's no proper size check of a USB_DT_INTERFACE_ASSOCIATION descriptor. It's only checked that the size is >= 2 in usb_parse_configuration(), so find_iad() might do out-of-bounds access to intf_assoc->bInterfaceCount. And he's right, we don't check for crazy descriptors of this type very well, so resolve this problem. Yet another issue found by syzkaller... Reported-by: Andrey Konovalov <andreyknvl@google.com> Tested-by: Andrey Konovalov <andreyknvl@google.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-09-19 17:27:16 +02:00
..
audio.h	include: usb: audio: specify exact endiannes of descriptors	2017-07-18 09:33:06 +03:00
cdc-wdm.h	USB: cdc-wdm: properly include types.h	2014-05-27 16:32:10 -07:00
cdc.h	cdc: add header guards	2015-09-15 21:53:24 -07:00
ch9.h	USB: fix out-of-bounds in usb_set_configuration	2017-09-19 17:27:16 +02:00
ch11.h	USB: hub: fix SS max number of ports	2017-05-17 11:53:02 +02:00
charger.h	include: uapi: usb: Introduce USB charger type and state definition	2017-08-15 15:05:00 +03:00
functionfs.h	usb: gadget: function: f_fs: Let ffs_epfile_ioctl wait for enable.	2017-06-02 11:22:31 +03:00
g_printer.h
gadgetfs.h
midi.h
tmc.h	Add ioctls to enable and disable local controls on an instrument	2016-02-03 13:54:06 -08:00
video.h	[media] uvcvideo: Enable UVC 1.5 device detection	2015-11-19 11:13:19 -02:00