USB: gadget: zero allocate endpoint 0 buffers
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 9 Dec 2021 18:02:15 +0000 (19:02 +0100)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 18 Dec 2021 23:20:10 +0000 (23:20 +0000)
commita146c6e62bdbb654d6dc021915ecb2cc54c38651
treef85a2de7c6ce1b1f980c85be821178819bad330e
parent590511028987dd445c68a9cc90e8f930a82c4755
USB: gadget: zero allocate endpoint 0 buffers

Origin: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit?id=6eea4ace62fa6414432692ee44f0c0a3d541d97a
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2021-39685

commit 86ebbc11bb3f60908a51f3e41a17e3f477c2eaa3 upstream.

Under some conditions, USB gadget devices can show allocated buffer
contents to a host.  Fix this up by zero-allocating them so that any
extra data will all just be zeros.

Reported-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Tested-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name USB-gadget-zero-allocate-endpoint-0-buffers.patch
drivers/usb/gadget/composite.c
drivers/usb/gadget/legacy/dbgp.c