linux/drivers/usb/wusbcore
Johan Hovold 03ace948a4 USB: wusbcore: fix NULL-deref at probe
Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

This specifically fixes the NULL-pointer dereference when probing HWA HC
devices.

Fixes: df3654236e ("wusb: add the Wire Adapter (WA) core")
Cc: stable <stable@vger.kernel.org>     # 2.6.28
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-03-14 17:07:30 +08:00
..
cbaf.c USB: wusbcore: add in missing white space in error message text 2016-09-13 17:24:24 +02:00
crypto.c wusbcore: Fix one more crypto-on-the-stack bug 2017-01-10 17:03:42 +01:00
dev-sysfs.c wusbcore: dev-sysfs: use permission-specific DEVICE_ATTR variants 2016-11-07 10:19:49 +01:00
devconnect.c usb: wusbcore: remove unreachable code 2016-04-19 04:33:15 +09:00
Kconfig usb: wusbcore: USB_WUSB_CBAF depends on USB 2014-09-23 22:06:33 -07:00
Makefile
mmc.c usb: wusbcore: fix panic in wusbhc_chid_set 2014-04-24 12:45:41 -07:00
pal.c
reservation.c usb: use %*pb[l] to print bitmaps including cpumasks and nodemasks 2015-02-13 21:21:38 -08:00
rh.c wusbcore: rh: use USB_DT_HUB 2015-04-03 19:03:15 +02:00
security.c usb: return correct errno code when krealloc fails 2016-11-29 17:36:43 +01:00
wa-hc.c USB: wusbcore: fix NULL-deref at probe 2017-03-14 17:07:30 +08:00
wa-hc.h usb: hub: rename khubd to hub_wq in documentation and comments 2014-09-23 22:33:19 -07:00
wa-nep.c usb: fix improper return value when kzalloc fails 2016-11-29 17:36:43 +01:00
wa-rpipe.c usb: use %*pb[l] to print bitmaps including cpumasks and nodemasks 2015-02-13 21:21:38 -08:00
wa-xfer.c usb: return correct errno on failures 2016-11-29 17:36:43 +01:00
wusbhc.c wusbcore: wusbhc: use permission-specific DEVICE_ATTR variants 2016-11-07 10:19:49 +01:00
wusbhc.h USB: core, wusbcore: use bus_to_hcd 2016-01-24 21:00:33 -08:00