PR/52383 CVS commit: src/sys/dev/usb

["Pierre Pronchery" <khorben%netbsd.org@localhost>]

The following reply was made to PR kern/52383; it has been noted by GNATS.

From: "Pierre Pronchery" <khorben%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/52383 CVS commit: src/sys/dev/usb
Date: Fri, 8 Dec 2017 14:46:18 +0000

 Module Name:	src
 Committed By:	khorben
 Date:		Fri Dec  8 14:46:18 UTC 2017
 
 Modified Files:
 	src/sys/dev/usb: usb_subr.c
 
 Log Message:
 Be more defensive towards malicious USB devices
 
 This avoids potential panics due to 0-sized memory allocation attempts,
 which could be triggered by malicious USB devices.
 
 Tested on NetBSD/amd64 with a Sony Xperia X (SailfishOS).
 
 Based on an initial patch by Nick Hudson <skrll%NetBSD.org@localhost>, thanks!
 
 Fixes PR kern/52383.
 
 XXX pull-up to netbsd-7, netbsd-8
 
 LGTM xtos@
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.221 -r1.222 src/sys/dev/usb/usb_subr.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.