OpenE2K
/
linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
linux/drivers/staging
History
Rustam Kovhaev c570a3d660 staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() 
commit fea22e159d upstream.

let's use usb_find_common_endpoints() to discover endpoints, it does all
necessary checks for type and xfer direction

remove memset() in hfa384x_create(), because we now assign endpoints in
prism2sta_probe_usb() and because create_wlan() uses kzalloc() to
allocate hfa384x struct before calling hfa384x_create()

Fixes: faaff97656 ("staging: wlan-ng: properly check endpoint types")
Reported-and-tested-by: syzbot+22794221ab96b0bab53a@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?extid=22794221ab96b0bab53a
Signed-off-by: Rustam Kovhaev <rkovhaev@gmail.com>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20200804145614.104320-1-rkovhaev@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
 		2020-09-17 13:47:51 +02:00
..
android staging: android: ashmem: Fix lockdep warning for write operation 2020-08-11 15:33:34 +02:00
axis-fifo staging: axis-fifo: add unspecified HAS_IOMEM dependency 2020-01-12 12:21:35 +01:00
board
…
clocking-wizard
…
comedi staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift 2020-07-29 10:18:42 +02:00
emxx_udc staging: emxx_udc: remove local TRUE/FALSE definition 2019-09-12 10:35:51 +01:00
exfat staging: exfat: fix multiple definition error of `rename_file' 2019-12-17 19:55:33 +01:00
fbtft fbtft: Make sure string is NULL terminated 2019-12-31 16:45:42 +01:00
fieldbus dt-bindings: anybus-controller: move to staging/ tree 2019-09-12 10:35:51 +01:00
fsl-dpaa2 staging: fsl-dpaa2/ethsw: do not force user to bring interface down 2019-08-14 16:46:25 +02:00
fwserial
…
gasket staging: gasket: Fix mapping refcnt leak when register/store fails 2020-06-24 17:50:21 +02:00
gdm724x
…
goldfish staging: Remove dev_err() usage after platform_get_irq() 2019-07-30 20:50:04 +02:00
greybus staging: greybus: fix a missing-check bug in gb_lights_light_config() 2020-06-24 17:50:20 +02:00
gs_fpgaboot
…
iio staging: iio: ad2s1210: Fix SPI reading 2020-05-27 17:46:45 +02:00
isdn staging: gigaset: add endpoint-type sanity check 2019-12-17 19:55:36 +01:00
kpc2000 staging: kpc2000: fix error return code in kp2000_pcie_probe() 2020-05-27 17:46:45 +02:00
ks7010 Revert "staging: ks7010: Fix build error" 2019-06-24 16:45:34 +08:00
media media: cedrus: Add missing v4l2_ctrl_request_hdl_put() 2020-09-09 19:12:26 +02:00
most staging: most: net: fix buffer overflow 2020-02-01 09:34:33 +00:00
mt7621-dma staging: Remove dev_err() usage after platform_get_irq() 2019-07-30 20:50:04 +02:00
mt7621-dts staging: mt7621-dts: add support for second network interface 2019-07-03 18:28:29 +02:00
mt7621-pci staging: mt7621-pci: add quirks for 'E2' revision using 'soc_device_attribute' 2020-02-01 09:34:47 +00:00
mt7621-pci-phy
…
mt7621-pinctrl staging: mt7621-pinctrl: Add of_node_put() before return 2019-07-22 07:34:15 +02:00
netlogic staging: netlogic: Change GFP_ATOMIC to GFP_KERNEL 2019-07-01 09:07:03 +02:00
nvec staging: nvec: make use of devm_platform_ioremap_resource 2019-09-12 10:35:50 +01:00
octeon staging/octeon: Use stubs for MIPS && !CAVIUM_OCTEON_SOC 2019-12-13 08:42:19 +01:00
octeon-usb usb: add a HCD_DMA flag instead of guestimating DMA capabilities 2019-08-21 10:03:35 -07:00
olpc_dcon staging: olpc_dcon: Remove TODO item 2019-07-30 09:52:04 +02:00
pi433 staging: pi433: Fix typo in documentation 2019-09-06 18:20:33 +02:00
qlge qlge: Fix build error without CONFIG_ETHERNET 2019-07-24 14:12:40 -07:00
ralink-gdma staging: Remove dev_err() usage after platform_get_irq() 2019-07-30 20:50:04 +02:00
rtl8188eu Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode 2020-08-11 15:33:34 +02:00
rtl8192e staging: rtl8192e: fix potential use after free 2019-12-04 22:30:47 +01:00
rtl8192u staging: rtl8192u: fix a dubious looking mask before a shift 2020-08-19 08:16:13 +02:00
rtl8712 staging: rtl8712: handle firmware load failure 2020-08-11 15:33:34 +02:00
rtl8723bs Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() 2020-06-30 15:37:11 -04:00
rts5208 staging: rts5208: Fix checkpath warning 2019-09-03 09:36:29 +02:00
sm750fb staging: sm750fb: add missing case while setting FB_VISUAL 2020-06-24 17:50:24 +02:00
speakup staging/speakup: fix get_word non-space look-ahead 2020-03-25 08:25:55 +01:00
unisys Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2019-08-19 11:54:03 -07:00
uwb USB: Move wusbcore and UWB to staging as it is obsolete 2019-08-08 07:52:01 +02:00
vc04_services staging: vchiq_arm: Add a matching unregister call 2020-08-19 08:16:09 +02:00
vme
…
vt6655 staging: vt6655: Fix memory leak in vt6655_probe 2019-10-07 12:34:55 +02:00
vt6656 staging: vt6656: Power save stop wake_up_count wrap around. 2020-04-29 16:33:22 +02:00
wilc1000 staging: wilc1000: Increase the size of wid_list array 2020-06-24 17:50:23 +02:00
wlan-ng staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() 2020-09-17 13:47:51 +02:00
wusbcore staging: wusbcore: Fix build error without CONFIG_USB 2019-08-09 14:56:57 +02:00
Kconfig Remove VirtualBox guest shared folders filesystem 2019-11-12 15:22:24 -08:00
Makefile Remove VirtualBox guest shared folders filesystem 2019-11-12 15:22:24 -08:00