[roll] Roll fuchsia [usb-cdc][rndis] Fix integer overflow in VMO region bounds checks

region.offset + region.length can wrap around when both values are
large, causing the bounds check to evaluate false and allowing
out-of-bounds memory access via data.data() + region.offset.

Replace with a subtraction-based check that avoids addition entirely:

  region.length > data.size() ||
  region.offset > data.size() - region.length

Affected files:
- src/connectivity/ethernet/drivers/usb-cdc-function/usb-cdc-function.cc
- src/connectivity/ethernet/drivers/rndis-function/rndis_function.cc

Original-Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1612009
Original-Original-Revision: b05e1645a520a1a4bf2f0ee6051351f76ec93670
GitOrigin-RevId: 3ea316780d37152051f4ec7ed3403a3a4e23ae24
Change-Id: I77a1a23ebd675ef942fa4888f86072b25d22ea34
Reviewed-on: https://fuchsia-review.googlesource.com/c/integration/+/1613204
Cr-Commit-Position: refs/heads/main@{#192752}
1 file changed
tree: 9ee31cca0bd7b285650c00aa909ddd9424014b36
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cobalt
  6. flower
  7. jiri.lock
  8. MILESTONE
  9. minimal
  10. prebuilts
  11. README.md
  12. stem
  13. test_durations
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.