linux/drivers/usb/wusbcore
Johan Hovold 03ace948a4 USB: wusbcore: fix NULL-deref at probe
Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

This specifically fixes the NULL-pointer dereference when probing HWA HC
devices.

Fixes: df3654236e ("wusb: add the Wire Adapter (WA) core")
Cc: stable <stable@vger.kernel.org>     # 2.6.28
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-03-14 17:07:30 +08:00
..
cbaf.c USB: wusbcore: add in missing white space in error message text 2016-09-13 17:24:24 +02:00
crypto.c wusbcore: Fix one more crypto-on-the-stack bug 2017-01-10 17:03:42 +01:00
dev-sysfs.c wusbcore: dev-sysfs: use permission-specific DEVICE_ATTR variants 2016-11-07 10:19:49 +01:00
devconnect.c usb: wusbcore: remove unreachable code 2016-04-19 04:33:15 +09:00
Kconfig
Makefile
mmc.c
pal.c
reservation.c
rh.c
security.c usb: return correct errno code when krealloc fails 2016-11-29 17:36:43 +01:00
wa-hc.c USB: wusbcore: fix NULL-deref at probe 2017-03-14 17:07:30 +08:00
wa-hc.h
wa-nep.c usb: fix improper return value when kzalloc fails 2016-11-29 17:36:43 +01:00
wa-rpipe.c
wa-xfer.c usb: return correct errno on failures 2016-11-29 17:36:43 +01:00
wusbhc.c wusbcore: wusbhc: use permission-specific DEVICE_ATTR variants 2016-11-07 10:19:49 +01:00
wusbhc.h