Revision 22d65765f211cc83186fd8b87521159f354c0da9 authored by Andrej Shadura on 16 September 2021, 16:33:11 UTC, committed by Jiri Kosina on 22 September 2021, 07:31:18 UTC
Since the actual_length calculation is performed unsigned, packets shorter than 7 bytes (e.g. packets without data or otherwise truncated) or non-received packets ("zero" bytes) can cause buffer overflow. Link: https://bugzilla.kernel.org/show_bug.cgi?id=214437 Fixes: 42337b9d4d958("HID: add driver for U2F Zero built-in LED and RNG") Signed-off-by: Andrej Shadura <andrew.shadura@collabora.co.uk> Signed-off-by: Jiri Kosina <jkosina@suse.cz>
1 parent d46ef75
File | Mode | Size |
---|---|---|
partitions | ||
Kconfig | -rw-r--r-- | 7.2 KB |
Kconfig.iosched | -rw-r--r-- | 1.3 KB |
Makefile | -rw-r--r-- | 1.7 KB |
badblocks.c | -rw-r--r-- | 14.1 KB |
bfq-cgroup.c | -rw-r--r-- | 38.5 KB |
bfq-iosched.c | -rw-r--r-- | 255.3 KB |
bfq-iosched.h | -rw-r--r-- | 37.4 KB |
bfq-wf2q.c | -rw-r--r-- | 52.7 KB |
bio-integrity.c | -rw-r--r-- | 12.3 KB |
bio.c | -rw-r--r-- | 47.3 KB |
blk-cgroup-rwstat.c | -rw-r--r-- | 3.4 KB |
blk-cgroup-rwstat.h | -rw-r--r-- | 3.9 KB |
blk-cgroup.c | -rw-r--r-- | 49.6 KB |
blk-core.c | -rw-r--r-- | 46.9 KB |
blk-crypto-fallback.c | -rw-r--r-- | 18.5 KB |
blk-crypto-internal.h | -rw-r--r-- | 5.4 KB |
blk-crypto.c | -rw-r--r-- | 11.9 KB |
blk-exec.c | -rw-r--r-- | 3.0 KB |
blk-flush.c | -rw-r--r-- | 15.3 KB |
blk-integrity.c | -rw-r--r-- | 11.8 KB |
blk-ioc.c | -rw-r--r-- | 10.1 KB |
blk-iocost.c | -rw-r--r-- | 96.4 KB |
blk-iolatency.c | -rw-r--r-- | 28.0 KB |
blk-ioprio.c | -rw-r--r-- | 6.4 KB |
blk-ioprio.h | -rw-r--r-- | 332 bytes |
blk-lib.c | -rw-r--r-- | 11.5 KB |
blk-map.c | -rw-r--r-- | 14.1 KB |
blk-merge.c | -rw-r--r-- | 30.2 KB |
blk-mq-cpumap.c | -rw-r--r-- | 2.2 KB |
blk-mq-debugfs-zoned.c | -rw-r--r-- | 435 bytes |
blk-mq-debugfs.c | -rw-r--r-- | 24.9 KB |
blk-mq-debugfs.h | -rw-r--r-- | 2.7 KB |
blk-mq-pci.c | -rw-r--r-- | 1.3 KB |
blk-mq-rdma.c | -rw-r--r-- | 1.3 KB |
blk-mq-sched.c | -rw-r--r-- | 18.1 KB |
blk-mq-sched.h | -rw-r--r-- | 2.5 KB |
blk-mq-sysfs.c | -rw-r--r-- | 7.0 KB |
blk-mq-tag.c | -rw-r--r-- | 17.7 KB |
blk-mq-tag.h | -rw-r--r-- | 2.6 KB |
blk-mq-virtio.c | -rw-r--r-- | 1.3 KB |
blk-mq.c | -rw-r--r-- | 99.8 KB |
blk-mq.h | -rw-r--r-- | 10.1 KB |
blk-pm.c | -rw-r--r-- | 6.8 KB |
blk-pm.h | -rw-r--r-- | 763 bytes |
blk-rq-qos.c | -rw-r--r-- | 7.0 KB |
blk-rq-qos.h | -rw-r--r-- | 5.3 KB |
blk-settings.c | -rw-r--r-- | 28.4 KB |
blk-stat.c | -rw-r--r-- | 4.8 KB |
blk-stat.h | -rw-r--r-- | 4.6 KB |
blk-sysfs.c | -rw-r--r-- | 24.5 KB |
blk-throttle.c | -rw-r--r-- | 68.5 KB |
blk-timeout.c | -rw-r--r-- | 4.1 KB |
blk-wbt.c | -rw-r--r-- | 19.9 KB |
blk-wbt.h | -rw-r--r-- | 2.8 KB |
blk-zoned.c | -rw-r--r-- | 17.0 KB |
blk.h | -rw-r--r-- | 11.8 KB |
bounce.c | -rw-r--r-- | 6.7 KB |
bsg-lib.c | -rw-r--r-- | 9.9 KB |
bsg.c | -rw-r--r-- | 11.2 KB |
disk-events.c | -rw-r--r-- | 12.9 KB |
elevator.c | -rw-r--r-- | 19.0 KB |
genhd.c | -rw-r--r-- | 34.4 KB |
holder.c | -rw-r--r-- | 4.2 KB |
ioctl.c | -rw-r--r-- | 15.8 KB |
ioprio.c | -rw-r--r-- | 5.1 KB |
keyslot-manager.c | -rw-r--r-- | 16.3 KB |
kyber-iosched.c | -rw-r--r-- | 27.8 KB |
mq-deadline.c | -rw-r--r-- | 30.1 KB |
opal_proto.h | -rw-r--r-- | 9.4 KB |
scsi_ioctl.c | -rw-r--r-- | 22.5 KB |
sed-opal.c | -rw-r--r-- | 62.5 KB |
t10-pi.c | -rw-r--r-- | 7.7 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...