q-dev: handle invalid values

QubesOS · Jun 18, 2024 · 29d32c5 · 29d32c5
1 parent 18abd26
commit 29d32c5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/qubesusbproxy/core3ext.py b/qubesusbproxy/core3ext.py
@@ -299,6 +299,9 @@ def _sanitize(
                         break
                     hex_code = untrusted_device_desc[i - 1: i + 1]
                     try:
+                        for i in range(2):
+                            if hex_code[i] not in b'0123456789abcdefABCDEF':
+                                raise ValueError()
                         hex_value = int(hex_code, 16)
                         c = chr(hex_value)
                     except ValueError: