1
linux/drivers/usb/misc
Kees Cook 3ed780117d usb: iowarrior: don't trust report_size for buffer size
If the iowarrior devices in this case statement support more than 8 bytes
per report, it is possible to write past the end of a kernel heap allocation.
This will probably never be possible, but change the allocation to be more
defensive anyway.

Signed-off-by: Kees Cook <kees.cook@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2010-10-22 10:22:08 -07:00
..
sisusbvga usb: makefile cleanup 2010-10-22 10:22:07 -07:00
adutux.c USB: adutux: fix misuse of return value of copy_to_user() 2010-08-23 20:50:17 -07:00
appledisplay.c USB: rename usb_buffer_alloc() and usb_buffer_free() users 2010-05-20 13:21:38 -07:00
cypress_cy7c63.c
cytherm.c
emi26.c
emi62.c
ftdi-elan.c usb: ftdi-elan: Convert "mutex" to semaphore 2010-10-22 10:21:31 -07:00
idmouse.c
iowarrior.c usb: iowarrior: don't trust report_size for buffer size 2010-10-22 10:22:08 -07:00
isight_firmware.c
Kconfig USB: add driver for Meywa-Denki & Kayac YUREX 2010-10-22 10:21:51 -07:00
ldusb.c
legousbtower.c USB: misc: Remove unnecessary casts of private_data 2010-08-10 14:35:39 -07:00
Makefile usb: makefile cleanup 2010-10-22 10:22:07 -07:00
rio500_usb.h
rio500.c USB: autoconvert trivial BKL users to private mutex 2010-08-10 14:35:39 -07:00
trancevibrator.c
usb_u132.h
usblcd.c USB: misc: Remove unnecessary casts of private_data 2010-08-10 14:35:39 -07:00
usbled.c
usbsevseg.c
usbtest.c USB: usbtest - ensure correct isoc data length 2010-10-22 10:22:01 -07:00
uss720.c
yurex.c USB: yurex: fix memory leak and corrupted messages 2010-10-22 10:21:52 -07:00