[PATCH] usb: gadget: dfu: Fix check of transfer direction

Marek Vasut marex at denx.de
Sun Dec 4 20:17:40 CET 2022


On 11/30/22 19:58, Fabio Estevam wrote:
> Adding Marek and Sultan
> 
> On Wed, Nov 30, 2022 at 3:55 PM <hsimeliere.opensource at witekio.com> wrote:
>>
>> From: Hugo SIMELIERE <hsimeliere.opensource at witekio.com>
>>
>> Commit fbce985e28eaca3af82afecc11961aadaf971a7e to fix CVE-2022-2347
>> blocks DFU usb requests.
>> The verification of the transfer direction was done by an equality
>> but it is a bit mask.
>>
>> Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource at witekio.com>

Reviewed-by: Marek Vasut <marex at denx.de>
Tested-by: Marek Vasut <marex at denx.de>

Thanks !


More information about the U-Boot mailing list