From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Subject: [1/2] USB: yurex: Fix buffer over-read in yurex_write() From: Ben Hutchings Message-Id: <1534407549.3135.14.camel@codethink.co.uk> Date: Thu, 16 Aug 2018 09:19:09 +0100 To: Jann Horn Cc: Greg Kroah-Hartman , linux-usb@vger.kernel.org List-ID: T24gVGh1LCAyMDE4LTA4LTE2IGF0IDA0OjE1ICswMjAwLCBKYW5uIEhvcm4gd3JvdGU6Cj4gT24g V2VkLCBBdWcgMTUsIDIwMTggYXQgMTA6NDQgUE0gQmVuIEh1dGNoaW5ncwo+IDxiZW4uaHV0Y2hp bmdzQGNvZGV0aGluay5jby51az4gd3JvdGU6ClsuLi5dCj4gPiBAQCAtNDQ2LDYgKzQ0Niw3IEBA IHN0YXRpYyBzc2l6ZV90IHl1cmV4X3dyaXRlKHN0cnVjdCBmaWxlICpmaWxlLCBjb25zdCBjaGFy IF9fdXNlciAqdXNlcl9idWZmZXIsCj4gPiDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC oHJldHZhbCA9IC1FRkFVTFQ7Cj4gPiDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoGdv dG8gZXJyb3I7Cj4gPiDCoMKgwqDCoMKgwqDCoMKgfQo+ID4gK8KgwqDCoMKgwqDCoMKgYnVmZmVy W2NvdW50XSA9IDA7Cj4gPiDCoMKgwqDCoMKgwqDCoMKgbWVtc2V0KGRldi0+Y250bF9idWZmZXIs IENNRF9QQURESU5HLCBZVVJFWF9CVUZfU0laRSk7Cj4gPiAKPiA+IMKgwqDCoMKgwqDCoMKgwqBz d2l0Y2ggKGJ1ZmZlclswXSkgewo+IAo+IEJ5IHRoZSB3YXk6IEEgbGl0dGxlIGJpdCBiZWxvdyBo ZXJlLCB0aGVyZSdzIHNvbWUgb3RoZXIgbGluZSB0aGF0IGxvb2tzIGJvZ3VzOgo+IAo+ID4gYnVm ZmVyWzZdID0gQ01EX0VPRjsKPiAKPiBBRkFJQ1MgdGhhdCBzaG91bGQgcHJvYmFibHkgZ28gaW50 byAtPmNudGxfYnVmZmVyOyBgYnVmZmVyYCBhbmQgYGRhdGFgCj4gYXJlbid0IHVzZWQgYmVsb3cg dGhhdCBwb2ludC4gQnV0IHRoYXQnZCBqdXN0IGJlIGEgZnVuY3Rpb25hbCBidWcsIG5vdAo+IHNl Y3VyaXR5LXJlbGV2YW50LCBzbyBJJ20gbm90IHN1cmUgd2hldGhlciBhbnlvbmUgY2FyZXMuCgpZ ZXMgSSBub3RpY2VkIHRoYXQgdG9vLiAgU2luY2UgSSBjYW4ndCB0ZXN0IHdpdGggdGhlIGFjdHVh bCBoYXJkd2FyZSwgSQpsZWZ0IGl0IGFsb25lLiAgRm9yIGFsbCBJIGtub3csIHRoZSBmaXJtd2Fy ZSBhY3R1YWxseSBleHBlY3RzCkNNRF9QQURESU5HIGFuZCBub3QgQ01EX0VPRiBhdCB0aGUgZW5k IG9mIHRoaXMgY29tbWFuZC4KCkJlbi4K