Re: [PATCH] [stable only]USB: fix buffer overflows with parsing CDC headers

2017-11-27 Thread Oliver Neukum
Am Freitag, den 24.11.2017, 17:13 +0100 schrieb Greg KH: > On Thu, Nov 23, 2017 at 04:20:05PM +0100, Oliver Neukum wrote: > > > > drivers/net/usb/cdc_ether.c | 9 - > > drivers/usb/class/cdc-acm.c | 2 +- > > drivers/usb/class/cdc-wdm.c | 2 ++ > > 3 files changed, 11 insertions(+), 2

Re: [PATCH] [stable only]USB: fix buffer overflows with parsing CDC headers

2017-11-24 Thread Greg KH
On Thu, Nov 23, 2017 at 04:20:05PM +0100, Oliver Neukum wrote: > Parsing CDC headers a buffer overflow cannot just be prevented > by checking that the remainder of the buffer is longer than minimum > length. The size of the fields to be parsed must be figured in, too. > > In newer kernels this

[PATCH] [stable only]USB: fix buffer overflows with parsing CDC headers

2017-11-23 Thread Oliver Neukum
Parsing CDC headers a buffer overflow cannot just be prevented by checking that the remainder of the buffer is longer than minimum length. The size of the fields to be parsed must be figured in, too. In newer kernels this issue has been fixed at a central location with commit