[U-Boot] [PATCH v2] usb: Use well-known descriptor sizes when parsing configuration

Marek Vasut marex at denx.de
Thu Jul 18 20:25:54 CEST 2013


Dear Julius Werner,

> > From a security / robustness standpoint,
> > 
> > - if the descriptor length field is found to be abnormal, then the code
> > 
> >   should not process the packet at all. Here it seems it only warns
> >   then goes on to use the descriptor.
> 
> Weren't you the guy who was so worried about poor Chinese devices who
> don't follow the spec just two mails ago?

That would have been me, not Albert. I suspect what happens below (and will 
likely happen onwards, if we don't cut the crap soon) is a bullshit-fueled 
discussion about nothing, so just can it. It's totally unproductive and drifting 
away from the discussion about patch. ML is not the right place for duking out 
this crap ...

Please, go, break a tartelette and fix your quarrel elsewhere.

Best regards,
Marek Vasut


More information about the U-Boot mailing list