xen/usb: harden xen_hcd against malicious backends
authorJuergen Gross <jgross@suse.com>
Fri, 11 Mar 2022 10:35:09 +0000 (11:35 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 16 Mar 2022 08:05:59 +0000 (09:05 +0100)
commitaff477cb8f94613f501d386d10f20019e294bc35
tree2ac514fde81db6bf0bd67887f1ab92ede848296d
parent7f220d4a38e095ef4ee851ef4ff90f92ed9b778b
xen/usb: harden xen_hcd against malicious backends

Make sure a malicious backend can't cause any harm other than wrong
I/O data.

Missing are verification of the request id in a response, sanitizing
the reported actual I/O length, and protection against interrupt storms
from the backend.

Signed-off-by: Juergen Gross <jgross@suse.com>
Link: https://lore.kernel.org/r/20220311103509.12908-1-jgross@suse.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/host/xen-hcd.c