MIRRORS/linux-imx
1
0
Fork 0
mirror of https://github.com/nxp-imx/linux-imx.git synced 2026-06-25 11:43:20 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
c1f10c6b89
linux-imx/drivers/usb/wusbcore
History
Johan Hovold 22011f5f23 USB: wusbcore: fix NULL-deref at probe 
commit 03ace948a4 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

This specifically fixes the NULL-pointer dereference when probing HWA HC
devices.

Fixes: df3654236e ("wusb: add the Wire Adapter (WA) core")
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
2017-07-18 18:38:32 +01:00
..
cbaf.c USB: wusbcore: return negative error codes 2011-06-07 09:09:10 -07:00
crypto.c Fix common misspellings 2011-03-31 11:26:23 -03:00
dev-sysfs.c uwb: use dev_dbg() for debug messages 2008-12-22 18:22:50 +00:00
devconnect.c usb: Add export.h for EXPORT_SYMBOL/THIS_MODULE where needed 2011-10-31 19:31:25 -04:00
Kconfig uwb: depend on EXPERIMENTAL 2008-09-17 16:54:36 +01:00
Makefile usb: makefile cleanup 2010-10-22 10:22:07 -07:00
mmc.c usb: Add export.h for EXPORT_SYMBOL/THIS_MODULE where needed 2011-10-31 19:31:25 -04:00
pal.c uwb: add basic radio manager 2008-11-19 14:46:33 +00:00
reservation.c Fix common misspellings 2011-03-31 11:26:23 -03:00
rh.c usb: Add export.h for EXPORT_SYMBOL/THIS_MODULE where needed 2011-10-31 19:31:25 -04:00
security.c usb: Add export.h for EXPORT_SYMBOL/THIS_MODULE where needed 2011-10-31 19:31:25 -04:00
wa-hc.c USB: wusbcore: fix NULL-deref at probe 2017-07-18 18:38:32 +01:00
wa-hc.h trivial: fix typos "man[ae]g?ment" -> "management" 2009-09-21 15:14:56 +02:00
wa-nep.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
wa-rpipe.c usb: wusbcore: set the RPIPE wMaxPacketSize value correctly 2014-01-03 04:33:15 +00:00
wa-xfer.c usb: wusbcore: change WA_SEGS_MAX to a legal value 2014-01-03 04:33:16 +00:00
wusbhc.c wusb: fix find_first_zero_bit() return value check 2011-03-02 19:52:28 -05:00
wusbhc.h Fix common misspellings 2011-03-31 11:26:23 -03:00