[roll] Roll fuchsia [usb][block] Fix UMS function vulnerabilities Resolve integer overflow and out-of-bounds read/write vulnerabilities on both the device-side (ums-function) and host-side (usb-mass-storage) drivers. * On the device side, validate block logical block addresses (LBAs) and transfer lengths in StartTransferBlocks and DataComplete (for UNMAP) using block::CheckIoRange prior to offset calculations. * On the host side, validate the read buffer size in ExecuteCommandSync to prevent exceeding the size of the pre-allocated 4KB data request buffer. Test: ums-test Original-Original-Bug: 528475878 Original-Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1690095 Original-Original-Revision: e5911a546fa6e442f5788f44d46bcd57c7e9e295 GitOrigin-RevId: 8e1507d6db29b7afe2b5c4761db2f98c4c6fa10e Change-Id: I62e89b5173db0d7544e60a0a27ae7f8ffba882bd Reviewed-on: https://fuchsia-review.googlesource.com/c/integration/+/1695456 Cr-Commit-Position: refs/heads/main@{#196225}
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.