linux-stable.git/include/uapi/linux/usb/ch9.h, branch v4.9.69

USB: core: Add type-specific length check of BOS descriptors

2017-12-09T21:01:56+00:00

commit 81cf4a45360f70528f1f64ba018d61cb5767249a upstream.

As most of BOS descriptors are longer in length than their header
'struct usb_dev_cap_header', comparing solely with it is not sufficient
to avoid out-of-bounds access to BOS descriptors.

This patch adds descriptor type specific length check in
usb_get_bos_descriptor() to fix the issue.

Signed-off-by: Masakazu Mokuno 
Signed-off-by: Greg Kroah-Hartman

USB: fix out-of-bounds in usb_set_configuration

2017-10-12T09:51:17+00:00

commit bd7a3fe770ebd8391d1c7d072ff88e9e76d063eb upstream.

Andrey Konovalov reported a possible out-of-bounds problem for a USB interface
association descriptor.  He writes:
	It seems there's no proper size check of a USB_DT_INTERFACE_ASSOCIATION
	descriptor. It's only checked that the size is >= 2 in
	usb_parse_configuration(), so find_iad() might do out-of-bounds access
	to intf_assoc->bInterfaceCount.

And he's right, we don't check for crazy descriptors of this type very well, so
resolve this problem.  Yet another issue found by syzkaller...

Reported-by: Andrey Konovalov 
Tested-by: Andrey Konovalov 
Signed-off-by: Greg Kroah-Hartman

USB: PD: additional feature selectors

2016-04-18T19:33:15+00:00

This adds the feature selectors from Table 9-8

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

USB: PD: define specific requests

2016-04-18T19:33:15+00:00

This takes the definitions of requests from chapter 9.3.1
of the USB Power Delivery spec.

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

USB: add descriptors from USB Power Delivery spec

2016-04-18T19:33:15+00:00

Adding the descriptors of chapter 9.2 of the Power Delivery spec.

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

usb: ch9: Fix SSP Device Cap wFunctionalitySupport type

2016-03-29T10:26:04+00:00

The wFunctionalitySupport field should be __le16.

Signed-off-by: John Youn 
Signed-off-by: Felipe Balbi

usb: add OTG status selector definition for HNP polling

2016-03-04T13:14:35+00:00

A host is required to use the GetStatus command, with wIndex set to the
OTG status selector(F000H) to request the Host request flag from the
peripheral.

Acked-by: Peter Chen 
Signed-off-by: Li Jun 
Signed-off-by: Felipe Balbi

usb: ch9: Add size macro for SSP dev cap descriptor

2016-03-04T13:14:22+00:00

The SuperspeedPlus Device Capability Descriptor has a variable size
depending on the number of sublink speed attributes.

This patch adds a macro to calculate that size. The macro takes one
argument, the Sublink Speed Attribute Count (SSAC) as reported by the
descriptor in bmAttributes[4:0].

See USB 3.1 9.6.2.5, Table 9-19.

Signed-off-by: John Youn 
Signed-off-by: Felipe Balbi

usb: Add USB 3.1 Precision time measurement capability descriptor support

2016-02-15T01:03:23+00:00

USB 3.1 devices that support precision time measurement have an
additional PTM cabaility descriptor as part of the full BOS descriptor

Look for this descriptor while parsing the BOS descriptor, and store it in
struct usb_hub_bos if it exists.

Signed-off-by: Mathias Nyman 
Signed-off-by: Greg Kroah-Hartman

usb: Add USB3.1 SuperSpeedPlus Isoc Endpoint Companion descriptor

2016-02-15T01:03:23+00:00

USB3.1 specifies a SuperSpeedPlus Isoc endpoint companion descriptor
which is returned as part of the devices complete configuration
descriptor.

It contains number of bytes per service interval which is needed when
reserving bus time in the schedule for transfers over 48K bytes per
service interval.

If bmAttributes bit 7 is set in the old SuperSpeed Endpoint Companion
descriptor, it will be ollowed by the new SuperSpeedPlus Isoc Endpoint
Companion descriptor.

Signed-off-by: Mathias Nyman 
Signed-off-by: Greg Kroah-Hartman