[PW_SID:569535] Bluetooth: fix division by zero in send path #590
Conversation
This patch adds workflow files for ci: [schedule_work.yml] - The workflow file for scheduled work - Sync the repo with upstream repo and rebase the workflow branch - Review the patches in the patchwork and creates the PR if needed [ci.yml] - The workflow file for CI tasks - Run CI tests when PR is created Signed-off-by: Tedd Ho-Jeong An <tedd.an@intel.com>
Add the missing bulk-out endpoint sanity check to probe() to avoid division by zero in bfusb_send_frame() in case a malicious device has broken descriptors (or when doing descriptor fuzz testing). Note that USB core will reject URBs submitted for endpoints with zero wMaxPacketSize but that drivers doing packet-size calculations still need to handle this (cf. commit 2548288 ("USB: Fix: Don't skip endpoint descriptors with maxpacket=0")). Cc: stable@vger.kernel.org Signed-off-by: Johan Hovold <johan@kernel.org>
|
CheckPatch |
|
GitLint |
|
BuildKernel |
|
TestRunner: Setup |
|
TestRunner: l2cap-tester |
|
TestRunner: bnep-tester |
|
TestRunner: mgmt-tester |
|
TestRunner: rfcomm-tester |
|
TestRunner: sco-tester |
|
TestRunner: smp-tester |
|
TestRunner: userchan-tester |
github-actions
bot
force-pushed
the
workflow
branch
6 times, most recently
from
fb6bc61
to
6b2046f
Compare
Add the missing bulk-out endpoint sanity check to probe() to avoid
division by zero in bfusb_send_frame() in case a malicious device has
broken descriptors (or when doing descriptor fuzz testing).
Note that USB core will reject URBs submitted for endpoints with zero
wMaxPacketSize but that drivers doing packet-size calculations still
need to handle this (cf. commit 2548288 ("USB: Fix: Don't skip
endpoint descriptors with maxpacket=0")).
Cc: stable@vger.kernel.org
Signed-off-by: Johan Hovold johan@kernel.org