From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Subject: USB: Fix off by one in type-specific length check of BOS SSP capability
From: Masakazu Mokuno <masakazu.mokuno@gmail.com>
Message-Id: <20171220023435.9B5C.F48FD4B1@gmail.com>
Date: Wed, 20 Dec 2017 02:34:39 +0900
To: Mathias Nyman <mathias.nyman@linux.intel.com>
Cc: gregkh@linuxfoundation.org, linux-usb@vger.kernel.org, linux-stable <stable@vger.kernel.org>
List-ID: <linux-usb.vger.kernel.org>
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=