[PATCH] usb: gadget: dfu: Fix check of transfer direction

Sultan Khan sultanqasim at gmail.com
Wed Nov 30 20:09:14 CET 2022


Reviewed-by: Sultan Qasim Khan <sultan.qasimkhan at nccgroup.com>

On Wed, Nov 30, 2022 at 2:02 PM Fabio Estevam <festevam at gmail.com> wrote:

> On Wed, Nov 30, 2022 at 3:55 PM <hsimeliere.opensource at witekio.com> wrote:
> >
> > From: Hugo SIMELIERE <hsimeliere.opensource at witekio.com>
> >
> > Commit fbce985e28eaca3af82afecc11961aadaf971a7e to fix CVE-2022-2347
> > blocks DFU usb requests.
> > The verification of the transfer direction was done by an equality
> > but it is a bit mask.
> >
> > Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource at witekio.com>
>
> Reviewed-by: Fabio Estevam <festevam at denx.de>
>


More information about the U-Boot mailing list