Greg Kroah-Hartman bd7a3fe770
USB: fix out-of-bounds in usb_set_configuration ...
Andrey Konovalov reported a possible out-of-bounds problem for a USB interface
association descriptor. He writes:
It seems there's no proper size check of a USB_DT_INTERFACE_ASSOCIATION
descriptor. It's only checked that the size is >= 2 in
usb_parse_configuration(), so find_iad() might do out-of-bounds access
to intf_assoc->bInterfaceCount.
And he's right, we don't check for crazy descriptors of this type very well, so
resolve this problem. Yet another issue found by syzkaller...
Reported-by: Andrey Konovalov <andreyknvl@google.com >
Tested-by: Andrey Konovalov <andreyknvl@google.com >
Cc: stable <stable@vger.kernel.org >
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org >
2017-09-19 17:27:16 +02:00
2017-09-01 09:21:12 +02:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-09-05 07:10:24 -04:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-09-04 13:25:16 +02:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-05-10 20:45:36 -07:00
2017-08-28 07:45:48 -07:00
2017-07-08 11:17:55 +02:00
2017-05-11 00:21:54 +09:00
2017-05-11 00:21:54 +09:00
2017-06-21 15:14:23 -04:00
2017-05-11 00:21:54 +09:00
2017-09-19 17:27:16 +02:00
2017-05-11 00:21:54 +09:00
2017-06-30 13:53:07 -07:00
2017-08-31 17:32:38 -04:00
2017-04-08 17:37:20 +02:00
2017-02-21 13:25:50 -08:00
2017-09-08 18:26:50 -07:00
2017-09-08 18:26:50 -07:00
2017-07-10 11:40:19 -07:00
2017-01-26 08:34:19 +01:00
2017-05-11 00:18:38 +09:00
2017-07-29 09:00:03 -06:00
2017-09-08 21:13:09 -07:00
2017-05-11 00:18:38 +09:00
2017-08-15 09:02:09 -07:00
2016-12-07 10:45:57 +01:00
2017-09-01 14:57:15 -05:00
2017-08-09 09:36:13 -04:00
2017-08-20 08:14:03 -04:00
2017-05-11 00:18:38 +09:00
2017-08-31 14:42:19 -07:00
2017-08-07 11:23:09 -05:00
2017-06-19 11:03:49 -04:00
2016-11-21 09:52:02 -05:00
2017-05-01 09:27:15 +02:00
2017-05-09 10:10:15 -07:00
2017-08-03 21:37:29 -07:00
2017-07-29 23:23:44 -07:00
2017-03-14 09:47:33 +08:00
2017-06-27 12:05:22 -06:00
2017-08-31 17:32:38 -04:00
2017-09-01 13:08:26 -07:00
2017-03-25 20:11:19 -07:00
2016-11-18 17:23:17 +00:00
2017-08-30 11:41:13 -07:00
2017-02-03 15:21:21 -05:00
2017-08-30 11:41:13 -07:00
2017-06-23 13:42:20 -04:00
2017-04-24 12:46:00 -04:00
2016-12-10 23:29:11 -05:00
2017-08-22 14:29:30 -07:00
2017-02-22 16:09:04 -05:00
2017-02-03 15:16:45 -05:00
2017-01-17 15:22:05 -05:00
2017-09-01 18:38:09 -07:00
2017-07-02 13:40:25 -07:00
2017-03-21 15:11:32 +01:00
2017-02-23 10:46:07 -05:00
2017-05-08 17:15:13 -07:00
2017-08-15 17:05:03 -07:00
2017-03-22 14:20:54 -07:00
2017-05-11 00:21:54 +09:00
2017-07-12 16:26:01 -07:00
2017-06-09 13:29:49 +10:00
2017-08-15 23:00:22 -04:00
2017-02-07 18:16:45 +01:00
2017-08-31 12:36:44 +10:00
2017-02-14 22:18:05 -05:00
2017-04-16 10:06:25 -06:00
2017-02-23 10:46:08 -05:00
2017-08-31 13:51:14 -06:00
2017-08-07 14:16:22 -07:00
2017-07-06 16:24:30 -07:00
2017-06-20 07:02:43 -03:00
2017-04-03 11:45:08 -04:00
2017-08-08 06:03:15 -04:00
2017-08-17 07:28:05 -07:00
2017-09-06 17:27:29 -07:00
2017-07-06 16:24:34 -07:00
2017-09-06 17:27:28 -07:00
2017-03-13 15:29:22 -07:00
2017-01-17 14:38:43 -05:00
2017-02-24 17:46:56 -08:00
2017-06-21 11:22:53 -04:00
2017-06-21 11:22:52 -04:00
2017-04-17 09:58:42 -06:00
2017-05-30 08:20:25 -06:00
2017-08-28 08:33:20 -07:00
2017-06-08 14:16:25 -04:00
2017-05-21 13:37:32 -04:00
2017-02-20 11:13:37 -05:00
2017-02-23 21:51:39 +01:00
2017-04-05 07:13:56 -07:00
2017-09-04 17:34:54 +02:00
2017-06-30 09:44:17 +03:00
2017-02-03 14:35:43 +13:00
2017-04-20 09:54:24 +02:00
2017-06-08 15:57:09 -04:00
2017-03-09 13:22:28 -08:00
2017-09-07 13:24:16 -05:00
2017-04-28 10:23:19 -05:00
2017-08-29 15:09:25 +02:00
2017-06-21 15:14:23 -04:00
2017-03-15 15:20:27 -07:00
2017-09-08 18:26:51 -07:00
2017-05-11 00:18:38 +09:00
2017-01-24 13:44:28 -05:00
2017-05-11 00:18:38 +09:00
2017-08-14 11:53:34 +02:00
2017-02-23 10:55:08 -05:00
2017-01-18 10:43:15 -08:00
2017-07-30 19:28:08 -07:00
2017-07-21 11:00:20 +01:00
2017-06-08 10:31:52 +02:00
2017-07-01 15:26:11 -07:00
2017-02-14 19:47:16 -07:00
2017-01-16 14:47:21 -05:00
2017-08-25 17:10:23 -07:00
2017-08-07 14:16:22 -07:00
2017-02-23 10:55:08 -05:00
2017-07-12 16:26:01 -07:00
2017-08-28 20:51:22 +02:00
2017-02-10 15:13:26 +01:00
2017-05-18 16:34:55 +02:00
2017-04-10 12:34:01 -03:00
2017-09-06 17:27:28 -07:00
2017-05-11 00:18:39 +09:00
2017-01-09 16:07:38 -05:00
2017-08-30 11:20:09 -07:00
2017-04-26 21:19:05 -04:00
2017-06-27 18:23:14 -05:00
2017-04-21 15:59:52 -04:00
2017-07-06 23:11:39 -07:00
2017-09-01 18:38:09 -07:00
2017-08-04 10:30:27 +02:00
2017-05-26 12:52:19 +02:00
2017-01-10 18:31:55 -08:00
2017-01-20 12:10:17 -05:00
2017-06-15 12:12:40 -04:00
2017-06-03 18:43:46 +09:00
2016-12-16 00:13:39 +02:00
2016-11-22 12:07:02 +01:00
2017-02-02 21:58:02 -05:00
2017-06-13 10:48:24 +02:00
2017-09-06 17:27:29 -07:00
2017-06-05 16:58:59 +02:00
2017-06-20 08:14:34 -03:00
2016-11-16 15:13:18 -02:00
2017-03-31 12:55:06 +02:00
2017-03-31 12:55:09 +02:00
2016-12-16 00:13:38 +02:00
2017-08-26 14:45:24 -04:00
2016-12-16 00:13:32 +02:00
2016-12-16 00:13:32 +02:00
2017-02-27 16:31:23 +02:00
2017-04-11 00:28:41 +03:00
2017-08-24 09:57:28 +02:00
2016-12-16 00:13:41 +02:00
2017-04-24 12:35:56 -04:00
2017-06-13 22:02:09 +03:00
2017-08-11 07:03:00 +02:00
bd7a3fe770