kernel_samsung_a53x/drivers/net/usb
Oliver Neukum 7d959bf862 usb: aqc111: check packet for fixup for true limit
[ Upstream commit ccab434e674ca95d483788b1895a70c21b7f016a ]

If a device sends a packet that is inbetween 0
and sizeof(u64) the value passed to skb_trim()
as length will wrap around ending up as some very
large value.

The driver will then proceed to parse the header
located at that position, which will either oops or
process some random value.

The fix is to check against sizeof(u64) rather than
0, which the driver currently does. The issue exists
since the introduction of the driver.

Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-11-18 12:11:56 +01:00
..
aqc111.c usb: aqc111: check packet for fixup for true limit 2024-11-18 12:11:56 +01:00
aqc111.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
asix.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
asix_common.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
asix_devices.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
ax88172a.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
ax88179_178a.c net: usb: ax88179_178a: fix failed operations during ax88179_reset 2024-11-18 12:10:55 +01:00
catc.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cdc-phonet.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cdc_eem.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cdc_ether.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cdc_mbim.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cdc_ncm.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cdc_subset.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
ch9200.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
cx82310_eth.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
dm9601.c net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read 2024-11-08 11:25:47 +01:00
gl620a.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
hso.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
huawei_cdc_ncm.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
int51x1.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
ipheth.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
kalmia.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
kaweth.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
Kconfig Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
lan78xx.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
lan78xx.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
lg-vl600.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
Makefile Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
mcs7830.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
net1080.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
pegasus.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
pegasus.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
plusb.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
qmi_wwan.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
r8152.c r8152: Release firmware if we have an error in probe 2024-11-18 10:58:30 +01:00
rndis_host.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
rtl8150.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
sierra_net.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
smsc75xx.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
smsc75xx.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
smsc95xx.c net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg 2024-11-18 10:58:29 +01:00
smsc95xx.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
sr9700.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
sr9700.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
sr9800.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
sr9800.h Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
usbnet.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00
zaurus.c Import A536BXXU9EXDC 2024-06-15 16:02:09 -03:00