---
- branch: MAIN
  date: Sun Apr 17 13:17:30 UTC 2022
  files:
  - new: '1.78'
    old: '1.77'
    path: src/sys/dev/usb/uvideo.c
    pathrev: src/sys/dev/usb/uvideo.c@1.78
    type: modified
  id: 20220417T131730Z.0210ae7c122c5e13ad6c37b64d623df306ef7934
  log: |
    uvideo(4): Parse descriptors more robustly.

    Validate lengths and types before barging ahead.

    Not sure exactly which missing validation syzbot tripped on here, but
    I'm pretty sure I caught all the cases.

    Reported-by: syzbot+60f0a25c077b67547f57@syzkaller.appspotmail.com
  module: src
  subject: 'CVS commit: src/sys/dev/usb'
  unixtime: '1650201450'
  user: riastradh