linux/drivers/usb/host
Chen Gang 13996ca7af USB: uhci: check buffer length to avoid memory overflow
for function uhci_sprint_schedule:
    the buffer len is MAX_OUTPUT: 64 * 1024, which may not be enough:
      may loop UHCI_NUMFRAMES times (UHCI_NUMFRAMES is 1024)
      each time of loop may get more than 64 bytes
    so need check the buffer length to avoid memory overflow

  this patch fix it like this:
    at first, make enough room for buffering the exceeding contents
    judge the contents which written whether bigger than buffer length
    if bigger (the exceeding contents will be in the exceeding buffer)
      break current work flow, and return.

Signed-off-by: Chen Gang <gang.chen@asianux.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-01-24 13:42:09 -08:00
..
whci USB: whci-hcd: fix NULL dereference on allocation failure 2012-08-15 15:17:39 -07:00
bcma-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ehci-atmel.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ehci-dbg.c USB: EHCI: remove unused Link Power Management code 2012-10-31 12:48:07 -07:00
ehci-fsl.c USB: ehci-fsl: fix regression on mpc5121e 2013-01-11 16:01:07 -08:00
ehci-fsl.h powerpc/usb: fix bug of CPU hang when missing USB PHY clock 2012-09-05 16:52:08 -07:00
ehci-grlib.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ehci-hcd.c USB: EHCI: miscellaneous cleanups for the library conversion 2012-11-11 18:06:48 -08:00
ehci-hub.c USB: EHCI: prepare to make ehci-hcd a library module 2012-11-01 08:51:12 -07:00
ehci-mem.c
ehci-msm.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ehci-mv.c usb: host: ehci-mv: fix clk APIs 2012-12-13 11:58:41 +02:00
ehci-mxc.c USB: ehci-mxc: remove Efika MX-specific CHRGVBUS hack 2013-01-11 16:20:36 -08:00
ehci-octeon.c USB: EHCI: remove ehci_port_power() routine 2012-10-31 12:48:07 -07:00
ehci-omap.c ARM: arm-soc: Header cleanups 2012-12-12 11:45:16 -08:00
ehci-orion.c Drivers: usb: host: ehci-orion.c: remove __devinitdata marking 2013-01-03 15:57:02 -08:00
ehci-pci.c USB: ehci: make debug port in-use detection functional again 2013-01-07 10:34:33 -08:00
ehci-platform.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ehci-pmcmsp.c USB: EHCI: remove ehci_port_power() routine 2012-10-31 12:48:07 -07:00
ehci-ppc-of.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ehci-ps3.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ehci-q.c USB: EHCI: bugfix: urb->hcpriv should not be NULL 2012-11-11 18:10:45 -08:00
ehci-s5p.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ehci-sched.c USB: EHCI: bugfix: urb->hcpriv should not be NULL 2012-11-11 18:10:45 -08:00
ehci-sead3.c Merge v3.6-rc3 into usb-next 2012-08-27 07:15:30 -07:00
ehci-sh.c USB: EHCI: remove ehci_port_power() routine 2012-10-31 12:48:07 -07:00
ehci-spear.c usb: remove use of __devinitdata 2012-11-21 13:27:16 -08:00
ehci-sysfs.c
ehci-tegra.c usb: remove use of __devinitdata 2012-11-21 13:27:16 -08:00
ehci-tilegx.c
ehci-timer.c USB: EHCI: convert warning messages to debug-level 2012-09-21 09:37:53 -07:00
ehci-vt8500.c USB: EHCI: remove unused Link Power Management code 2012-10-31 12:48:07 -07:00
ehci-w90x900.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ehci-xilinx-of.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ehci.h USB: EHCI: miscellaneous cleanups for the library conversion 2012-11-11 18:06:48 -08:00
fhci-dbg.c
fhci-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
fhci-hub.c
fhci-mem.c
fhci-q.c
fhci-sched.c USB: FHCI: use list_move_tail instead of list_del/list_add_tail 2012-09-05 16:55:18 -07:00
fhci-tds.c
fhci.h
fsl-mph-dr-of.c USB: fsl-mph-dr-of: fix regression on mpc5121e 2013-01-11 16:01:06 -08:00
hwa-hc.c
imx21-dbg.c
imx21-hcd.c usb: imx21-hcd: Include missing linux/module.h 2013-01-11 12:01:09 -08:00
imx21-hcd.h ARM: imx: move platform_data definitions 2012-09-14 11:17:21 +02:00
isp116x-hcd.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
isp116x.h
isp1362-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
isp1362.h
isp1760-hcd.c
isp1760-hcd.h
isp1760-if.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
Kconfig USB: EHCI: make ehci-platform a separate driver 2012-11-01 08:51:13 -07:00
Makefile USB: EHCI: make ehci-platform a separate driver 2012-11-01 08:51:13 -07:00
octeon2-common.c
ohci-at91.c ARM: arm-soc: Header cleanups 2012-12-12 11:45:16 -08:00
ohci-da8xx.c ARM: davinci: move platform_data definitions 2012-09-14 11:16:54 +02:00
ohci-dbg.c
ohci-ep93xx.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-exynos.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ohci-hcd.c USB: OHCI: remove Alchemy OHCI platform driver. 2012-10-22 11:29:12 -07:00
ohci-hub.c USB: ohci: merge ohci_finish_controller_resume with ohci_resume 2012-10-22 11:23:59 -07:00
ohci-jz4740.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ohci-mem.c
ohci-nxp.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-octeon.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-omap3.c ARM: arm-soc: Header cleanups 2012-12-12 11:45:16 -08:00
ohci-omap.c ARM: arm-soc: Header cleanups 2012-12-12 11:45:16 -08:00
ohci-pci.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-platform.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ohci-ppc-of.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-ps3.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-pxa27x.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-q.c USB: ohci: set urb->hcpriv = NULL immediately, after free it 2013-01-11 16:03:38 -08:00
ohci-s3c2410.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
ohci-sa1111.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
ohci-sm501.c USB: OHCI: sm501: fix build failure after ohci_finish_controller_resume removal 2012-10-23 10:18:53 -07:00
ohci-spear.c usb: remove use of __devinitdata 2012-11-21 13:27:16 -08:00
ohci-tilegx.c
ohci-tmio.c usb: host: ohci-tmio: fix compile warning 2013-01-11 16:22:53 -08:00
ohci.h
oxu210hp-hcd.c
oxu210hp.h
pci-quirks.c xhci: Add Lynx Point LP to list of Intel switchable hosts 2012-11-28 11:21:29 -08:00
pci-quirks.h usb: host: xhci: fix compilation error for non-PCI based stacks 2012-09-05 12:26:11 -07:00
r8a66597-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
r8a66597.h usb/host/r8a66597: remove conditional compilation of clk code 2012-07-30 17:25:12 -07:00
sl811_cs.c
sl811-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
sl811.h
ssb-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
u132-hcd.c usb: remove use of __devexit 2012-11-21 13:27:17 -08:00
uhci-debug.c USB: uhci: check buffer length to avoid memory overflow 2013-01-24 13:42:09 -08:00
uhci-grlib.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
uhci-hcd.c USB: uhci: check buffer length to avoid memory overflow 2013-01-24 13:42:09 -08:00
uhci-hcd.h
uhci-hub.c
uhci-pci.c
uhci-platform.c usb: remove use of __devinit 2012-11-21 13:27:16 -08:00
uhci-q.c USB: uhci: check buffer length to avoid memory overflow 2013-01-24 13:42:09 -08:00
xhci-dbg.c xhci: trivial: Remove assigned but unused slot_ctx. 2012-10-25 13:13:48 -07:00
xhci-ext-caps.h
xhci-hub.c xhci: Avoid "dead ports", add roothub port polling. 2013-01-03 14:10:29 -08:00
xhci-mem.c xhci: Handle HS bulk/ctrl endpoints that don't NAK. 2013-01-03 14:09:55 -08:00
xhci-pci.c usb: host: xhci: move HC_STATE_SUSPENDED check to xhci_suspend() 2012-11-12 11:45:34 -08:00
xhci-plat.c usb: host: xhci-plat: use ioremap_nocache 2012-09-05 12:07:19 -07:00
xhci-ring.c usb: host: xhci: remove unused trb var in xhci_irq() 2013-01-03 14:10:39 -08:00
xhci.c xhci: Avoid "dead ports", add roothub port polling. 2013-01-03 14:10:29 -08:00
xhci.h xhci: Avoid global symbol pollution with handshake. 2012-11-12 11:44:25 -08:00