On Wed, May 02, 2018 at 09:50:04AM +0200, Johan Hovold wrote:
> On Sun, Apr 29, 2018 at 05:41:55PM +0200, Greg Kroah-Hartman wrote:
> > If we get an invalid device configuration from a palm 3 type device, we
> > might incorrectly parse things, and we have the potential to crash in
> > "interesting" ways.
> > 
> > Fix this up by verifying the size of the configuration passed to us by
> > the device, and only if it is correct, will we handle it.
> > 
> > Reported-by: Andrey Konovalov <andreyk...@google.com>
> > Reviewed-by: Andrey Konovalov <andreyk...@google.com>
> > Signed-off-by: Greg Kroah-Hartman <gre...@linuxfoundation.org>
> > 
> > ---
> > 
> > Here is my long-forgotten patch for the visor driver to resolve an issue
> > that Andrey found back in September of 2017.  Sorry for the long delay.
> > 
> > Johan, I incorporated your review comments of my original one-off patch
> > here as well.
> 
> Thanks for the update. I've applied this for 4.17-rc now after adding a
> stable tag and a comment about this one also fixing a slab info leak
> (through that dev_info in the port loop below).

Ugh, I forgot about the stable tag, thanks for that!

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to