[PATCH] usb: gadget: dfu: Fix check of transfer direction

Fabio Estevam festevam at gmail.com
Wed Nov 30 20:02:16 CET 2022


On Wed, Nov 30, 2022 at 3:55 PM <hsimeliere.opensource at witekio.com> wrote:
>
> From: Hugo SIMELIERE <hsimeliere.opensource at witekio.com>
>
> Commit fbce985e28eaca3af82afecc11961aadaf971a7e to fix CVE-2022-2347
> blocks DFU usb requests.
> The verification of the transfer direction was done by an equality
> but it is a bit mask.
>
> Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource at witekio.com>

Reviewed-by: Fabio Estevam <festevam at denx.de>


More information about the U-Boot mailing list