leandrof/linux
1
0
Fork 0
forked from Minki/linux
Code Issues Pull Requests Packages Projects Releases Wiki Activity
f369fdf4f6
linux/drivers/usb/misc
History
Johan Hovold f259ca3eed USB: uss720: fix NULL-deref at probe 
Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Note that the endpoint access that causes the NULL-deref is currently
only used for debugging purposes during probe so the oops only happens
when dynamic debugging is enabled. This means the driver could be
rewritten to continue to accept device with only two endpoints, should
such devices exist.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-03-14 17:07:30 +08:00
..
sisusbvga drivers: usb-misc: sisusbvga: remove dead code 2017-02-08 07:43:47 +01:00
adutux.c sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h> 2017-03-02 08:42:32 +01:00
appledisplay.c usb: misc: appledisplay: don't print on ENOMEM 2016-08-30 19:17:37 +02:00
chaoskey.c hwrng: chaoskey - drop workaround for old hwrng core limitation 2016-10-24 15:17:51 +02:00
cypress_cy7c63.c usb: misc: cypress_cy7c63: don't print on ENOMEM 2016-08-30 19:17:37 +02:00
cytherm.c usb: misc: cytherm: don't print on ENOMEM 2016-08-30 19:17:38 +02:00
ehset.c usb: ehci: Add support for SINGLE_STEP_SET_FEATURE test of EHSET 2013-08-12 13:13:32 -07:00
emi26.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
emi62.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ezusb.c ezusb: constify local structures 2016-09-13 17:24:24 +02:00
ftdi-elan.c Replace <asm/uaccess.h> with <linux/uaccess.h> globally 2016-12-24 11:46:01 -08:00
idmouse.c USB: idmouse: fix NULL-deref at probe 2017-03-14 17:07:30 +08:00
iowarrior.c USB: iowarrior: fix NULL-deref in write 2017-03-09 10:25:37 +01:00
isight_firmware.c
Kconfig usb: misc: add USB251xB/xBi Hi-Speed Hub Controller Driver 2017-02-14 09:33:49 -08:00
ldusb.c Replace <asm/uaccess.h> with <linux/uaccess.h> globally 2016-12-24 11:46:01 -08:00
legousbtower.c lib/vsprintf.c: remove %Z support 2017-02-27 18:43:47 -08:00
lvstest.c USB: lvtest: fix NULL-deref at probe 2017-03-14 17:07:30 +08:00
Makefile usb: misc: add USB251xB/xBi Hi-Speed Hub Controller Driver 2017-02-14 09:33:49 -08:00
rio500_usb.h
rio500.c sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h> 2017-03-02 08:42:32 +01:00
trancevibrator.c usb: misc: trancevibrator: don't print on ENOMEM 2016-08-30 19:17:38 +02:00
ucsi.c usb: Add driver for UCSI 2016-04-29 15:29:18 -07:00
ucsi.h usb: Add driver for UCSI 2016-04-29 15:29:18 -07:00
usb251xb.c usb: usb251xb: dt: add unit suffix to oc-delay and power-on-time 2017-03-09 10:34:16 +01:00
usb3503.c usb: misc: usb3503: Clean up on driver unbind 2016-06-07 22:19:59 -07:00
usb4604.c usb: misc: Add driver for usb4604 2016-08-09 15:49:01 +02:00
usb_u132.h
usblcd.c usb: misc: usblcd: don't print on ENOMEM 2016-08-30 19:17:38 +02:00
usbsevseg.c usb: misc: usbsevseg: don't print on ENOMEM 2016-08-30 19:17:38 +02:00
usbtest.c usb: misc: usbtest: remove redundant check on retval < 0 2017-02-14 09:32:25 -08:00
uss720.c USB: uss720: fix NULL-deref at probe 2017-03-14 17:07:30 +08:00
yurex.c usb: misc: yurex: don't print on ENOMEM 2016-08-30 19:17:38 +02:00