mbox

[PULL,0/6] Usb 20210505 patches

Message ID 20210505130716.1128420-1-kraxel@redhat.com
State New
Headers show

Pull-request

git://git.kraxel.org/qemu tags/usb-20210505-pull-request

Message

Gerd Hoffmann May 5, 2021, 1:07 p.m. UTC 
The following changes since commit 15106f7dc3290ff3254611f265849a314a93eb0e:

  Merge remote-tracking branch 'remotes/rth-gitlab/tags/pull-hex-20210502' into staging (2021-05-02 16:23:05 +0100)

are available in the Git repository at:

  git://git.kraxel.org/qemu tags/usb-20210505-pull-request

for you to fetch changes up to 05a40b172e4d691371534828078be47e7fff524c:

  usb: limit combined packets to 1 MiB (CVE-2021-3527) (2021-05-05 15:06:01 +0200)

----------------------------------------------------------------
usb: fix some memory allocation issues (CVE-2021-3527).
usb: add stubs, allow building without usb subsystem.

----------------------------------------------------------------

Gerd Hoffmann (4):
  usb/hid: avoid dynamic stack allocation
  usb/redir: avoid dynamic stack allocation (CVE-2021-3527)
  usb/mtp: avoid dynamic stack allocation
  usb: limit combined packets to 1 MiB (CVE-2021-3527)

Philippe Mathieu-Daudé (2):
  hw/usb/host-stub: Remove unused header
  hw/usb: Do not build USB subsystem if not required

 hw/usb/combined-packet.c |  4 +++-
 hw/usb/dev-hid.c         |  2 +-
 hw/usb/dev-mtp.c         |  3 ++-
 hw/usb/dev-wacom.c       |  2 +-
 hw/usb/host-stub.c       |  1 -
 hw/usb/redirect.c        |  6 +++---
 stubs/usb-dev-stub.c     | 25 +++++++++++++++++++++++++
 MAINTAINERS              |  1 +
 hw/usb/meson.build       |  9 +++------
 stubs/meson.build        |  1 +
 10 files changed, 40 insertions(+), 14 deletions(-)
 create mode 100644 stubs/usb-dev-stub.c

Comments

Peter Maydell May 11, 2021, 7:36 a.m. UTC | #1 
On Wed, 5 May 2021 at 14:09, Gerd Hoffmann <kraxel@redhat.com> wrote:
>
> The following changes since commit 15106f7dc3290ff3254611f265849a314a93eb0e:
>
>   Merge remote-tracking branch 'remotes/rth-gitlab/tags/pull-hex-20210502' into staging (2021-05-02 16:23:05 +0100)
>
> are available in the Git repository at:
>
>   git://git.kraxel.org/qemu tags/usb-20210505-pull-request
>
> for you to fetch changes up to 05a40b172e4d691371534828078be47e7fff524c:
>
>   usb: limit combined packets to 1 MiB (CVE-2021-3527) (2021-05-05 15:06:01 +0200)
>
> ----------------------------------------------------------------
> usb: fix some memory allocation issues (CVE-2021-3527).
> usb: add stubs, allow building without usb subsystem.
>


Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/6.1
for any user-visible changes.

-- PMM