TencentOS-kernel/drivers/usb
Mathias Nyman 21fbdd301e xhci: fix potential array out of bounds with several interrupters
[ Upstream commit 286fd02fd54b6acab65809549cf5fb3f2a886696 ]

The Max Interrupters supported by the controller is given in a 10bit
wide bitfield, but the driver uses a fixed 128 size array to index these
interrupters.

Klockwork reports a possible array out of bounds case which in theory
is possible. In practice this hasn't been hit as a common number of Max
Interrupters for new controllers is 8, not even close to 128.

This needs to be fixed anyway

Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
Link: https://lore.kernel.org/r/20210406070208.3406266-4-mathias.nyman@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-05-20 16:07:25 +08:00
..
atm Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
c67x00 USB: c67x00: fix use after free in c67x00_giveback_urb 2021-03-16 16:32:07 +08:00
cdns3 usb: cdns3: gadget: suspicious implicit sign extension 2021-03-16 16:40:27 +08:00
chipidea usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() 2021-04-12 12:51:11 +08:00
class USB: CDC-ACM: fix poison/unpoison imbalance 2021-05-20 16:07:16 +08:00
common Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
core USB: Add reset-resume quirk for WD19's Realtek Hub 2021-05-20 16:07:18 +08:00
dwc2 usb: dwc2: Prevent core suspend when port connection flag is 0 2021-05-20 16:06:51 +08:00
dwc3 usb: dwc3: gadget: Ignore EP queue requests during bus reset 2021-05-20 16:07:24 +08:00
early USB: early: Handle AMD's spec-compliant identifiers, too 2021-03-16 16:26:55 +08:00
gadget usb: gadget: f_uac1: validate input parameters 2021-05-20 16:07:24 +08:00
host xhci: fix potential array out of bounds with several interrupters 2021-05-20 16:07:25 +08:00
image Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
isp1760 Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
misc USB: yurex: fix control-URB timeout handling 2021-04-12 12:51:12 +08:00
mon Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
mtu3 usb: mtu3: fix memory corruption in mtu3_debugfs_regset() 2021-03-16 16:42:31 +08:00
musb usb: musb: Fix suspend with devices connected for a64 2021-05-20 16:06:51 +08:00
phy usb: phy: twl6030-usb: Fix a resource leak in an error handling path in 'twl6030_usb_probe()' 2021-03-16 16:28:29 +08:00
renesas_usbhs usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM 2021-04-12 12:53:07 +08:00
roles Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
serial USB: serial: cp210x: add some more GE USB IDs 2021-04-12 12:53:07 +08:00
storage usb-storage: Add quirk to defeat Kindle's automatic unload 2021-04-12 12:53:18 +08:00
typec usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- 2021-04-12 12:53:19 +08:00
usbip usbip: synchronize event handler with sysfs code paths 2021-05-20 16:06:58 +08:00
Kconfig Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
Makefile Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00
usb-skeleton.c Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces. 2021-03-16 11:01:34 +08:00