| commit | c7dfbf322595ded4e70b626bf83158a9f3807c6a | |
| author | Prasad J Pandit <pjp@fedoraproject.org> | |
| Thu, 2 Feb 2017 19:22:28 +0000 (3 00:52 +0530) | ||
| committer | Gerd Hoffmann <kraxel@redhat.com> | |
| Mon, 6 Feb 2017 09:23:18 +0000 (6 10:23 +0100) | ||
| tree | 5f0691706df1e1f7ab93861fef7eff4c35fb28ca | treesnapshot (tar.gz zip) |
| parent | 96d87bdda3919bb16f754b3d3fd1227e1f38f13c | commitdiff |
usb: ccid: check ccid apdu length
CCID device emulator uses Application Protocol Data Units(APDU)
to exchange command and responses to and from the host.
The length in these units couldn't be greater than 65536. Add
check to ensure the same. It'd also avoid potential integer
overflow in emulated_apdu_from_guest.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20170202192228.10847-1-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
CCID device emulator uses Application Protocol Data Units(APDU)
to exchange command and responses to and from the host.
The length in these units couldn't be greater than 65536. Add
check to ensure the same. It'd also avoid potential integer
overflow in emulated_apdu_from_guest.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20170202192228.10847-1-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
| hw/usb/dev-smartcard-reader.c | diffblobblamehistory |