| commit | 402cbd2c36bc9818dd4a33e3904f2f5881794a0f | [log] [tgz] |
|---|---|---|
| author | Venkatesh Yadav Abbarapu <venkatesh.abbarapu@amd.com> | Thu Nov 03 09:37:48 2022 +0530 |
| committer | Tom Rini <trini@konsulko.com> | Mon Nov 21 09:23:00 2022 -0500 |
| tree | d087f00cc8ecaaaae5ea1de5a7a9729141338448 | |
| parent | 1155ddde56901b3325974da389a2a664d0f88698 [diff] |
usb: gadget: dfu: Fix the unchecked length field DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction. Fixing the length and transfer direction. CVE-2022-2347 Signed-off-by: Venkatesh Yadav Abbarapu <venkatesh.abbarapu@amd.com> Reviewed-by: Marek Vasut <marex@denx.de>