qemu-e2k/hw/usb
Gerd Hoffmann 05a40b172e usb: limit combined packets to 1 MiB (CVE-2021-3527)
usb-host and usb-redirect try to batch bulk transfers by combining many
small usb packets into a single, large transfer request, to reduce the
overhead and improve performance.

This patch adds a size limit of 1 MiB for those combined packets to
restrict the host resources the guest can bind that way.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-Id: <20210503132915.2335822-6-kraxel@redhat.com>
2021-05-05 15:06:01 +02:00
..
bus.c usb: remove support for -usbdevice parameters 2021-03-15 17:00:58 +01:00
ccid-card-emulated.c Various spelling fixes 2021-03-09 21:19:10 +01:00
ccid-card-passthru.c hw/usb: Fix bad printf format specifiers 2021-01-22 14:51:35 +01:00
ccid.h
chipidea.c
combined-packet.c usb: limit combined packets to 1 MiB (CVE-2021-3527) 2021-05-05 15:06:01 +02:00
core.c usb: add pcap support. 2021-01-22 14:51:35 +01:00
desc-msos.c
desc.c
desc.h
dev-audio.c usb: Un-deprecate -usbdevice (except for -usbdevice audio which gets removed) 2021-03-15 17:00:58 +01:00
dev-hid.c usb/hid: avoid dynamic stack allocation 2021-05-04 08:38:23 +02:00
dev-hub.c Remove superfluous timer_del() calls 2021-01-08 15:13:38 +00:00
dev-mtp.c usb/mtp: avoid dynamic stack allocation 2021-05-04 08:38:40 +02:00
dev-network.c
dev-serial.c usb: remove support for -usbdevice parameters 2021-03-15 17:00:58 +01:00
dev-smartcard-reader.c usb: Remove "-usbdevice ccid" 2021-03-26 06:37:03 +01:00
dev-storage-bot.c usb/storage: move usb-bot device to separate source file 2021-03-15 17:01:12 +01:00
dev-storage-classic.c usb/storage move usb-storage device to separate source file 2021-03-15 17:01:12 +01:00
dev-storage.c usb/storage: clear csw on reset 2021-03-15 17:01:17 +01:00
dev-uas.c scsi: drop 'result' argument from command_complete callback 2021-02-25 14:14:32 +01:00
dev-wacom.c usb/hid: avoid dynamic stack allocation 2021-05-04 08:38:23 +02:00
hcd-dwc2.c hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() 2020-10-19 09:17:21 +02:00
hcd-dwc2.h
hcd-dwc3.c usb: Add DWC3 model 2020-12-15 12:04:30 +00:00
hcd-ehci-pci.c
hcd-ehci-sysbus.c hw/usb/hcd-ehci-sysbus: Free USBPacket on instance finalize() 2021-03-26 09:14:48 +01:00
hcd-ehci.c hw/usb/hcd-ehci: Fix crash when showing help of EHCI devices 2021-03-26 11:10:49 +01:00
hcd-ehci.h hw/arm/npcm7xx: Add EHCI and OHCI controllers 2020-10-27 11:10:21 +00:00
hcd-musb.c
hcd-ohci-pci.c Remove superfluous timer_del() calls 2021-01-08 15:13:38 +00:00
hcd-ohci.c Various spelling fixes 2021-03-09 21:19:10 +01:00
hcd-ohci.h
hcd-uhci.c hw/usb: Extract VT82C686 UHCI PCI function into a new unit 2021-03-15 17:00:59 +01:00
hcd-uhci.h hw/usb/hcd-uhci: Expose generic prototypes to local header 2021-03-15 17:00:59 +01:00
hcd-xhci-nec.c usb: Fix Lesser GPL version number 2020-11-15 16:40:48 +01:00
hcd-xhci-pci.c hw/usb: Convert to qdev_realize() 2021-01-22 14:51:35 +01:00
hcd-xhci-pci.h usb: Fix Lesser GPL version number 2020-11-15 16:40:48 +01:00
hcd-xhci-sysbus.c hw/usb: Convert to qdev_realize() 2021-01-22 14:51:35 +01:00
hcd-xhci-sysbus.h usb/xhci: add include/hw/usb/xhci.h header file 2020-10-21 11:36:19 +02:00
hcd-xhci.c Remove superfluous timer_del() calls 2021-01-08 15:13:38 +00:00
hcd-xhci.h hw/usb/hcd-xhci: Fix extraneous format-truncation error on 32-bit hosts 2021-01-22 14:51:35 +01:00
host-libusb.c sysemu: Let VMChangeStateHandler take boolean 'running' argument 2021-03-09 23:13:57 +01:00
host-stub.c hw/usb/host-stub: Remove unused header 2021-05-04 08:38:23 +02:00
host.h
imx-usb-phy.c
Kconfig usb/storage: add kconfig symbols 2021-03-15 17:01:12 +01:00
libhw.c
meson.build hw/usb: Do not build USB subsystem if not required 2021-05-04 08:38:23 +02:00
pcap.c usb/pcap: set flag_setup 2021-02-17 14:29:12 +01:00
quirks-ftdi-ids.h
quirks-pl2303-ids.h
quirks.c
quirks.h
redirect.c usb/redir: avoid dynamic stack allocation (CVE-2021-3527) 2021-05-04 08:38:34 +02:00
trace-events usb-storage: switch trace events 2020-11-16 09:11:21 +01:00
trace.h
tusb6010.c
u2f-emulated.c
u2f-passthru.c u2f-passthru: put it into the 'misc' category 2021-02-20 12:36:19 +01:00
u2f.c usb: remove '-usbdevice u2f-key' 2021-03-15 17:00:58 +01:00
u2f.h
vt82c686-uhci-pci.c hw/usb: Extract VT82C686 UHCI PCI function into a new unit 2021-03-15 17:00:59 +01:00
xen-usb.c
xlnx-usb-subsystem.c usb: xlnx-usb-subsystem: Add xilinx usb subsystem 2020-12-15 12:04:30 +00:00
xlnx-versal-usb2-ctrl-regs.c usb: Add versal-usb2-ctrl-regs module 2020-12-15 12:04:30 +00:00