]> git.baikalelectronics.ru Git - uboot.git/commit
projects / uboot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 18235b8) | patch
usb: gadget: dfu: Fix check of transfer direction
authorHugo SIMELIERE <hsimeliere.opensource@witekio.com>
Wed, 30 Nov 2022 08:29:16 +0000 (09:29 +0100)
committerMarek Vasut <marex@denx.de>
Thu, 8 Dec 2022 13:30:39 +0000 (14:30 +0100)
commitddacbfcd25302baba3c63d0b30be5ce4e3eadc0a
tree3336abb6e57f66cd247b2267b5edcf63917a1540tree | snapshot
parent18235b80b880ac472af7e8d31dc861a3f9600f85commit | diff
usb: gadget: dfu: Fix check of transfer direction

Commit 26e83fa4a2c4c8a8a92079835d00db6cc0be7fbc to fix CVE-2022-2347
blocks DFU usb requests.
The verification of the transfer direction was done by an equality
but it is a bit mask.

Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Reviewed-by: Fabio Estevam <festevam@denx.de>
Reviewed-by: Sultan Qasim Khan <sultan.qasimkhan@nccgroup.com>
Reviewed-by: Marek Vasut <marex@denx.de>
Tested-by: Marek Vasut <marex@denx.de>
drivers/usb/gadget/f_dfu.c diff | blob | history
"Das U-Boot" Source Tree.