[Midnightbsd-cvs] [MidnightBSD/src] d93e35: A missing length validation code common to these t...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: d93e35dfd84e93bd8c4bfe980c1fbf52a16d7a36
      https://github.com/MidnightBSD/src/commit/d93e35dfd84e93bd8c4bfe980c1fbf52a16d7a36
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2020-08-07 (Fri, 07 Aug 2020)

  Changed paths:
    M sys/dev/usb/net/if_smsc.c

  Log Message:
  -----------
  A missing length validation code common to these three drivers means that a
malicious USB device could write beyond the end of an allocated network
packet buffer.

- smsc(4), supporting SMSC (now Microchip) devices
- muge(4), supporting Microchip devices
- cdceem(4), supporting USB Communication Device Class compatible devices


  Commit: de09e265d6711853c0d47625ca07d4ad2794eb76
      https://github.com/MidnightBSD/src/commit/de09e265d6711853c0d47625ca07d4ad2794eb76
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2020-08-07 (Fri, 07 Aug 2020)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  document usb fix


Compare: https://github.com/MidnightBSD/src/compare/56f7bb3207fd...de09e265d671