diff options
| author | Josh Boyer <jwboyer@fedoraproject.org> | 2016-03-14 09:33:40 -0700 |
|---|---|---|
| committer | Luis Henriques <luis.henriques@canonical.com> | 2016-03-29 15:55:16 +0100 |
| commit | f1782c9cd0966146457368672a25e4509a484ef6 (patch) | |
| tree | 9667c40a0de1f91fee3851fa07ea13c4041ef908 /include/linux | |
| parent | 8b03d9086461070caa263541bf83508ab30f52cc (diff) | |
Input: powermate - fix oops with malicious USB descriptors
commit 9c6ba456711687b794dcf285856fc14e2c76074f upstream.
The powermate driver expects at least one valid USB endpoint in its
probe function. If given malicious descriptors that specify 0 for
the number of endpoints, it will crash. Validate the number of
endpoints on the interface before using them.
The full report for this issue can be found here:
http://seclists.org/bugtraq/2016/Mar/85
Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Cc: Moritz Muehlenhoff <jmm@inutil.org>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions