On Fri, Nov 10, 2017 at 01:25:50AM +0900, Masakazu Mokuno wrote:
> 
> As most of BOS descriptors are longer in length than their header
> 'struct usb_dev_cap_header', comparing solely with it is not sufficient
> to avoid out-of-bounds access to BOS descriptors.
> 
> This patch adds descriptor type specific length check in
> usb_get_bos_descriptor() to fix the issue.
> 
> Signed-off-by: Masakazu Mokuno <[email protected]>

So is the current code "broken" somehow, and this patch should be
backported to the stable kernels?

thanks,

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to