USB: digi_acceleport: do sanity checking for the number of ports
authorOliver Neukum <oneukum@suse.com>
Thu, 31 Mar 2016 16:04:26 +0000 (12:04 -0400)
committerWilly Tarreau <w@1wt.eu>
Tue, 7 Jun 2016 08:42:45 +0000 (10:42 +0200)
commit129e6372f40a423bcded0a6dae547205edf652fb
tree4e3dd376fd066789d332b926a5ac03b8aa9a8172
parentffb372d838110dfa0efe00ce046ff282eeba1248
USB: digi_acceleport: do sanity checking for the number of ports

commit 5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f upstream.

The driver can be crashed with devices that expose crafted descriptors
with too few endpoints.

See: http://seclists.org/bugtraq/2016/Mar/61

Signed-off-by: Oliver Neukum <ONeukum@suse.com>
[johan: fix OOB endpoint check and add error messages ]
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Willy Tarreau <w@1wt.eu>
drivers/usb/serial/digi_acceleport.c