Pengpeng HouandMarc Kleine-Budde 93fcab2c69 can: peak_usb: validate uCAN receive record lengths ...

pcan_usb_fd_decode_buf() walks uCAN records packed in one USB
receive buffer.

Require each record to contain the fixed header for its type, and verify
CAN payload bytes before copying them into the skb.

Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260706092836.79754-1-pengpeng@iscas.ac.cn
Fixes: 0a25e1f4f1 ("can: peak_usb: add support for PEAK new CANFD USB adapters")
Cc: stable@vger.kernel.org
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>

2026-07-29 11:59:01 +02:00

..

Makefile

…

pcan_usb_core.c

can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error

2026-07-29 11:58:25 +02:00

pcan_usb_core.h

can: peak: Modification of references to email accounts being deleted

2026-07-16 09:12:24 +02:00

pcan_usb_fd.c

can: peak_usb: validate uCAN receive record lengths

2026-07-29 11:59:01 +02:00

pcan_usb_pro.c

can: peak_usb: add bounds check for USB channel index

2026-07-29 11:58:25 +02:00

pcan_usb_pro.h

can: peak: Modification of references to email accounts being deleted

2026-07-16 09:12:24 +02:00

pcan_usb.c

can: peak: Modification of references to email accounts being deleted

2026-07-16 09:12:24 +02:00