Gerd Hoffmann 31fb4444a4 usb-ccid: add check message size checks ...

Check message size too when figuring whenever we should expect more data.
Fix debug message to show useful data, p->iov.size is fixed anyway if we
land there, print how much we got meanwhile instead.

Also check announced message size against actual message size.  That
is a more general fix for CVE-2017-5898 than commit "c7dfbf3 usb: ccid:
check ccid apdu length".

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-id: 1487250819-23764-4-git-send-email-kraxel@redhat.com

2017-02-21 08:11:43 +01:00

..

bus.c

migration: Allow "device add" options to only add migratable devices

2017-01-24 17:54:47 +00:00

ccid-card-emulated.c

event_notifier: cleanups around event_notifier_set_handler

2017-01-16 17:52:35 +01:00

ccid-card-passthru.c

char: rename CharDriverState Chardev

2017-01-27 18:07:59 +01:00

ccid.h

usb: Change *_exitfn return type from int to void

2016-10-28 18:17:23 +03:00

combined-packet.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

core.c

usb: check RNDIS message length

2016-02-23 10:38:00 +01:00

desc-msos.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

desc.c

usb: accept usb3 control requests

2017-02-06 10:23:17 +01:00

desc.h

all: Clean up includes

2016-02-23 12:43:05 +00:00

dev-audio.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

dev-bluetooth.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

dev-hid.c

hw/usb/dev-hid: Improve guest compatibility of usb-tablet

2017-02-06 10:23:17 +01:00

dev-hub.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

dev-mtp.c

usb: Set category and description of the MTP device

2017-01-24 23:26:54 +03:00

dev-network.c

net: Use correct type for bool flag

2016-07-19 20:18:27 +02:00

dev-serial.c

char: rename CharDriverState Chardev

2017-01-27 18:07:59 +01:00

dev-smartcard-reader.c

usb-ccid: add check message size checks

2017-02-21 08:11:43 +01:00

dev-storage.c

block/qdev: Allow configuring WCE with qdev properties

2016-07-13 13:32:27 +02:00

dev-uas.c

usb/uas: more verbose error message

2017-02-06 10:23:17 +01:00

dev-wacom.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

hcd-ehci-pci.c

usb: ehci: fix memory leak in ehci

2017-02-21 08:11:42 +01:00

hcd-ehci-sysbus.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

hcd-ehci.c

usb: ehci: fix memory leak in ehci

2017-02-21 08:11:42 +01:00

hcd-ehci.h

usb: ehci: fix memory leak in ehci

2017-02-21 08:11:42 +01:00

hcd-musb.c

Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND

2016-03-22 22:20:17 +01:00

hcd-ohci.c

usb: ohci: limit the number of link eds

2017-02-21 08:11:42 +01:00

hcd-uhci.c

usb/uhci: move pid check

2016-04-25 12:05:05 +01:00

hcd-xhci.c

xhci: drop via vendor command handling

2017-02-21 08:11:43 +01:00

host-legacy.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

host-libusb.c

hw/ppc/spapr: Fix boot path of usb-host storage devices

2017-01-31 10:10:13 +11:00

host-stub.c

hw/ppc/spapr: Fix boot path of usb-host storage devices

2017-01-31 10:10:13 +11:00

host.h

usb-host: move legacy cmd line bits

2013-02-19 12:30:05 +01:00

libhw.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

Makefile.objs

xen: add pvUSB backend

2016-05-23 13:30:03 +02:00

quirks-ftdi-ids.h

usbredir: Add support for buffered bulk input (v2)

2013-01-08 10:56:58 +01:00

quirks-pl2303-ids.h

usbredir: Add support for buffered bulk input (v2)

2013-01-08 10:56:58 +01:00

quirks.c

usb: Clean up includes

2016-01-29 15:07:23 +00:00

quirks.h

usbredir: Add support for buffered bulk input (v2)

2013-01-08 10:56:58 +01:00

redirect.c

char: rename CharDriverState Chardev

2017-01-27 18:07:59 +01:00

trace-events

xhci: apply limits to loops

2017-02-21 08:11:43 +01:00

tusb6010.c

Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND

2016-03-22 22:20:17 +01:00

xen-usb.c

xen: attach pvusb usb bus to backend qdev

2016-11-22 10:29:41 -08:00