linux/drivers/usb/misc
Josh Boyer 4ec0ef3a82 USB: iowarrior: fix oops with malicious USB descriptors
The iowarrior driver expects at least one valid endpoint.  If given
malicious descriptors that specify 0 for the number of endpoints,
it will crash in the probe function.  Ensure there is at least
one endpoint on the interface before using it.

The full report of this issue can be found here:
http://seclists.org/bugtraq/2016/Mar/87

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-03-18 09:19:02 -07:00
..
sisusbvga usb-misc: sisusbvga: fix error path 2016-01-24 21:04:54 -08:00
adutux.c USB: adutux: NULL dereferences on disconnect 2014-11-26 19:50:15 -08:00
appledisplay.c USB: appledisplay: Deletion of a check before backlight_device_unregister() 2015-03-18 16:56:40 +01:00
chaoskey.c usb/misc/chaoskey: introduce an URB for asynchronous reads 2016-02-20 20:12:21 -08:00
cypress_cy7c63.c
cytherm.c
ehset.c
emi26.c
emi62.c
ezusb.c
ftdi-elan.c usb: misc: ftdi-elan: Simplify return statement 2015-08-05 12:37:21 -07:00
idmouse.c USB: idmouse.c: Put the interface on error 2016-03-03 19:44:06 -08:00
iowarrior.c USB: iowarrior: fix oops with malicious USB descriptors 2016-03-18 09:19:02 -07:00
isight_firmware.c
Kconfig Revert "usb: add HAS_IOMEM dependency to USB_APPLEDISPLAY" 2016-02-20 14:21:41 -08:00
ldusb.c usb, HID: Remove Vernier devices from lsusb and hid_ignore_list 2015-06-01 14:44:08 +02:00
legousbtower.c USB: legotower: use msecs_to_jiffies for time conversion 2015-03-18 16:20:34 +01:00
lvstest.c Pratyush Anand has moved 2015-06-25 17:00:38 -07:00
Makefile usb: Add driver for Altus Metrum ChaosKey device (v2) 2015-03-26 10:47:11 +01:00
rio500_usb.h
rio500.c
trancevibrator.c
usb3503.c usb: misc: usb3503: Use i2c_add_driver helper macro 2015-10-24 19:53:53 -07:00
usb_u132.h
usblcd.c
usbled.c
usbsevseg.c
usbtest.c usb: misc: usbtest: Remove timeval usage 2015-12-01 14:52:58 -08:00
uss720.c USB: uss720.c: move assignment out of if () block 2015-05-10 16:01:12 +02:00
yurex.c usb: yurex: fixed sparse warning of incorrect type 2014-11-03 15:34:00 -08:00