Re: [PATCH] dfu: bounds check USB upload and download sizes

Hi Fabio, Ah, sorry I missed that. This was on my todo list to patch as when I looked last week I didn’t see any patch for it. That patch you linked should also work to solve the issue. Best regards, Sultan Qasim Khan > On Nov 8, 2022, at 7:56 PM, Fabio Estevam wrote: > > Hi Sultan, > > On

Re: [PATCH] dfu: bounds check USB upload and download sizes

Hi Sultan, On Tue, Nov 8, 2022 at 9:22 PM Sultan Qasim Khan wrote: > > Also verify transfer directions match what is expected for the operation > type. Addresses memory corruption and disclosure vulnerability > CVE-2022-2347. > > Signed-off-by: Sultan Qasim Khan There was a submission already

[PATCH] dfu: bounds check USB upload and download sizes

Also verify transfer directions match what is expected for the operation type. Addresses memory corruption and disclosure vulnerability CVE-2022-2347. Signed-off-by: Sultan Qasim Khan --- drivers/usb/gadget/f_dfu.c | 17 - 1 file changed, 16 insertions(+), 1 deletion(-) diff