Vincent Pelletier 83e526f2a2 usb: gadget: f_fs: Assorted buffer overflow checks. ... OS descriptor head, when flagged as provided, is accessed without checking if it fits in provided buffer. Verify length before access. Also, there are other places where buffer length it checked after accessing offsets which are potentially past the end. Check buffer length before as well to fail cleanly. Signed-off-by: Vincent Pelletier <plr.vincent@gmail.com> Acked-by: Felipe Balbi <felipe.balbi@linux.intel.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-01-25 12:03:52 +01:00
..
Makefile	…
f_acm.c	…
f_ecm.c	…
f_eem.c	usb: gadget: prevent potenial null pointer dereference on skb->len	2016-09-06 10:44:03 +03:00
f_fs.c	usb: gadget: f_fs: Assorted buffer overflow checks.	2017-01-25 12:03:52 +01:00
f_hid.c	usb: gadget: Fix copy/pasted error message	2017-01-03 14:33:59 +02:00
f_loopback.c	usb: gadget: remove variable ret and remove unnecessary if statement	2016-09-09 13:38:37 +03:00
f_mass_storage.c	usb: gadget: Add per-lun inquiry string	2016-08-25 12:13:13 +03:00
f_mass_storage.h	usb: gadget: Add per-lun inquiry string	2016-08-25 12:13:13 +03:00
f_midi.c	usb: gadget: remove useless parameter in alloc_ep_req()	2016-08-25 12:13:19 +03:00
f_ncm.c	ktime: Cleanup ktime_set() usage	2016-12-25 17:21:22 +01:00
f_obex.c	…
f_phonet.c	net: use core MTU range checking in misc drivers	2016-10-20 14:51:10 -04:00
f_printer.c	idr: add ida_is_empty	2016-12-14 16:04:10 -08:00
f_rndis.c	usb: gadget: function: f_rndis: socket buffer may be NULL	2016-08-22 10:45:12 +03:00
f_serial.c	…
f_sourcesink.c	usb: gadget: remove useless parameter in alloc_ep_req()	2016-08-25 12:13:19 +03:00
f_subset.c	…
f_tcm.c	usb: gadget: Fix second argument of percpu_ida_alloc()	2016-12-09 10:20:08 -08:00
f_uac1.c	…
f_uac2.c	usb: gadget: f_uac2: fix error handling at afunc_bind	2016-11-18 13:54:09 +02:00
f_uvc.c	usb: gadget: uvc: Add missing call for additional setup data	2016-08-31 10:06:04 +03:00
f_uvc.h	…
g_zero.h	…
ndis.h	…
rndis.c	usb: gadget: Fix checkpatch error for braces	2016-11-18 13:54:41 +02:00
rndis.h	usb: gadget: Fix checkpatch error for braces	2016-11-18 13:54:41 +02:00
storage_common.c	usb: gadget: Add per-lun inquiry string	2016-08-25 12:13:13 +03:00
storage_common.h	usb: gadget: Add per-lun inquiry string	2016-08-25 12:13:13 +03:00
tcm.h	…
u_ecm.h	…
u_eem.h	…
u_ether.c	USB/PHY patches for 4.10-rc1	2016-12-13 11:10:36 -08:00
u_ether.h	usb: gadget: u_ether: add a flag to avoid skb_reserve() calling	2016-08-31 10:06:03 +03:00
u_ether_configfs.h	…
u_fs.h	…
u_gether.h	…
u_hid.h	…
u_midi.h	…
u_ncm.h	…
u_phonet.h	…
u_printer.h	…
u_rndis.h	…
u_serial.c	usb: gadget: serial: fix possible Oops caused by calling kthread_stop(NULL)	2016-11-18 13:55:19 +02:00
u_serial.h	…
u_tcm.h	…
u_uac1.c	…
u_uac1.h	…
u_uac2.h	…
u_uvc.h	…
uvc.h	usb: gadget: Fix checkpatch error for braces	2016-11-18 13:54:41 +02:00
uvc_configfs.c	fs: configfs: don't return anything from drop_link	2016-12-01 10:50:49 +01:00
uvc_configfs.h	…
uvc_queue.c	[media] vb2: replace void *alloc_ctxs by struct device *alloc_devs	2016-07-08 14:45:07 -03:00
uvc_queue.h	…
uvc_v4l2.c	usb: gadget: Fix checkpatch error for braces	2016-11-18 13:54:41 +02:00
uvc_v4l2.h	…
uvc_video.c	usb: gadget: composite: always set ep->mult to a sensible value	2016-10-31 11:15:33 +02:00
uvc_video.h	…