diff options
author | Alan Stern <[email protected]> | 2016-08-01 15:25:56 -0400 |
---|---|---|
committer | Greg Kroah-Hartman <[email protected]> | 2016-08-09 16:14:18 +0200 |
commit | aed9d65ac3278d4febd8665bd7db59ef53e825fe (patch) | |
tree | f9a3decc5f7b42dc3b12e34b3fac1c20c3cbe713 /lib/mpi/mpi-bit.c | |
parent | 9c6256a5e707a9eb8b91962b550050b13aa75334 (diff) |
USB: validate wMaxPacketValue entries in endpoint descriptors
Erroneous or malicious endpoint descriptors may have non-zero bits in
reserved positions, or out-of-bounds values. This patch helps prevent
these from causing problems by bounds-checking the wMaxPacketValue
entries in endpoint descriptors and capping the values at the maximum
allowed.
This issue was first discovered and tests were conducted by Jake Lamberson
<[email protected]>, an intern working for Rosie Hall.
Signed-off-by: Alan Stern <[email protected]>
Reported-by: roswest <[email protected]>
Tested-by: roswest <[email protected]>
CC: <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'lib/mpi/mpi-bit.c')
0 files changed, 0 insertions, 0 deletions