mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-07-22 03:27:30 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
linux/drivers/usb/gadget/function
History
Griffin Kroah-Hartman 21b5bf1554 usb: gadget: function: rndis: add length check for header 
Add a length check for the rndis header in rndis_rm_hdr, to ensure that
MessageType, MessageLength, DataOffset, and DataLength fields are
present before they are accessed.

Assisted-by: gkh_clanker_2000
Cc: stable <stable@kernel.org>
Signed-off-by: Griffin Kroah-Hartman <griffin@kroah.com>
Link: https://patch.msgid.link/20260708-usb-gadget-rndis-v1-2-e77e026dcc6a@kroah.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-07-08 13:32:16 +02:00
..
f_acm.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_ecm.c
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
f_eem.c
usb: gadget: f_eem: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
f_fs.c
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
2026-06-25 15:24:00 +01:00
f_hid.c
usb: gadget: f_hid: fix device reference leak in hidg_alloc()
2026-05-22 10:34:06 +02:00
f_loopback.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_mass_storage.c
usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
2026-03-11 16:17:44 +01:00
f_mass_storage.h
USB: gadget: fix up const issue with struct usb_function_instance
2025-05-23 12:31:34 +02:00
f_midi2.c
usb: gadget: functionfs: Use safer strscpy() instead of strcpy()
2026-03-11 15:39:04 +01:00
f_midi.c
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
f_ncm.c
usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
2026-04-07 13:50:49 +02:00
f_obex.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_phonet.c
usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
2026-04-07 13:50:34 +02:00
f_printer.c
usb: gadget: f_printer: take kref only for successful open
2026-07-08 13:29:57 +02:00
f_rndis.c
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
f_serial.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_sourcesink.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_subset.c
usb: gadget: f_subset: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
f_tcm.c
Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
2026-04-21 08:22:18 -07:00
f_uac1_legacy.c
usb: gadget: f_uac1_legacy: validate control request size
2026-04-02 09:37:17 +02:00
f_uac1.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_uac2.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
f_uvc.c
usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind
2026-05-22 10:35:36 +02:00
f_uvc.h
usb: gadget: uvc: prevent use of disabled endpoint
2023-11-23 12:32:44 +00:00
g_zero.h
usb: gadget: f_sourcesink: Support maxburst configurability for bulk endpoints
2026-01-07 16:13:25 +01:00
Makefile
usb: gadget: uvc: add trace of enqueued and completed requests
2024-10-17 08:42:23 +02:00
ndis.h
…
rndis.c
usb: gadget: function: rndis: add length check for header
2026-07-08 13:32:16 +02:00
rndis.h
usb: gadget: rndis: add spinlock for rndis response list
2022-02-24 11:16:57 +01:00
storage_common.c
usb: gadget: add missing MODULE_DESCRIPTION() macros
2024-06-20 19:18:19 +02:00
storage_common.h
usb: storage: add a macro for the upper limit of max LUN
2024-12-04 16:33:54 +01:00
tcm.h
usb: gadget: f_tcm: Stall on invalid CBW
2024-12-24 08:56:07 +01:00
u_audio.c
Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses
2026-02-22 08:26:33 -08:00
u_audio.h
usb: gadget: u_audio: Add suspend call
2022-01-26 14:06:09 +01:00
u_ecm.h
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
u_eem.h
usb: gadget: f_eem: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
u_ether_configfs.h
Revert "usb: gadget: u_ether: add gether_opts for config caching"
2026-03-11 16:21:16 +01:00
u_ether.c
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
2026-03-18 16:16:45 +01:00
u_ether.h
usb: gadget: f_ncm: Fix net_device lifecycle with device_move
2026-03-11 16:21:19 +01:00
u_fs.h
functionfs: use spinlock for FFS_DEACTIVATED/FFS_CLOSING transitions
2026-02-05 13:53:12 -05:00
u_gether.h
usb: gadget: f_subset: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
u_hid.h
usb: gadget: hid: allow dynamic interval configuration via configfs
2025-05-01 17:30:48 +02:00
u_midi2.h
usb: gadget: midi2: More flexible MIDI 1.0 configuration
2023-07-26 06:38:14 +02:00
u_midi.h
usb: gadget: f_midi: allow customizing the USB MIDI interface string through configfs
2025-12-17 14:43:01 +01:00
u_ncm.h
usb: gadget: u_ncm: Add kernel-doc comments for struct f_ncm_opts
2026-03-30 17:19:29 +02:00
u_phonet.h
usb: gadget: function: Remove unused declarations
2023-08-22 14:45:29 +02:00
u_printer.h
…
u_rndis.h
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
2026-03-30 17:19:29 +02:00
u_serial.c
usb: gadget: functionfs: Use safer strscpy() instead of strcpy()
2026-03-11 15:39:04 +01:00
u_serial.h
usb: gadget: f_acm: make bInterfaceProtocol configurable
2024-09-03 09:54:16 +02:00
u_tcm.h
…
u_uac1_legacy.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
u_uac1_legacy.h
…
u_uac1.h
usb: gadget: f_uac1: Change volume name and remove alt names
2024-08-13 18:11:35 +02:00
u_uac2.h
usb: gadget: f_uac2: Expose all string descriptors through configfs.
2024-08-13 10:37:05 +02:00
u_uvc.h
usb: gadget: webcam: Make g_webcam loadable again
2023-12-15 18:27:38 +01:00
uac_common.h
usb: gadget: u_audio: Support multiple sampling rates
2022-01-26 14:06:08 +01:00
uvc_configfs.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
uvc_configfs.h
usb: gadget: uvc: Avoid -Wflex-array-member-not-at-end warnings
2025-04-11 16:08:33 +02:00
uvc_queue.c
usb: gadget: uvc: retry vb2_reqbufs() with vb_vmalloc_memops if use_sg fail
2026-01-14 16:03:18 +01:00
uvc_queue.h
usb: gadget: uvc: set req_length based on payload by nreqs instead of req_size
2024-10-17 08:42:22 +02:00
uvc_trace.c
usb: gadget: uvc: add trace of enqueued and completed requests
2024-10-17 08:42:23 +02:00
uvc_trace.h
usb: gadget: uvc: add trace of enqueued and completed requests
2024-10-17 08:42:23 +02:00
uvc_v4l2.c
usb: gadget: uvc: fix NULL pointer dereference during unbind race
2026-03-30 17:04:50 +02:00
uvc_v4l2.h
…
uvc_video.c
usb: gadget: uvc: fix interval_duration calculation
2026-03-11 16:19:04 +01:00
uvc_video.h
usb: gadget: uvc: move video disable logic to its own function
2023-11-23 12:32:44 +00:00
uvc.h
usb: gadget: uvc: fix NULL pointer dereference during unbind race
2026-03-30 17:04:50 +02:00