Revision d979e9f9ecab04c1ecca741370e30a8a498893f5 authored by Johan Hovold on 27 August 2014, 09:55:18 UTC, committed by Greg Kroah-Hartman on 27 August 2014, 20:23:52 UTC
Make sure to verify the maximum number of endpoints per type to avoid
writing beyond the end of a stack-allocated array.

The current usb-serial implementation is limited to eight ports per
interface but failed to verify that the number of endpoints of a certain
type reported by a device did not exceed this limit.

Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 0393689
History
File Mode Size
double.h -rw-r--r-- 6.2 KB
op-1.h -rw-r--r-- 9.2 KB
op-2.h -rw-r--r-- 19.5 KB
op-4.h -rw-r--r-- 23.2 KB
op-8.h -rw-r--r-- 3.8 KB
op-common.h -rw-r--r-- 26.0 KB
quad.h -rw-r--r-- 6.5 KB
single.h -rw-r--r-- 3.8 KB
soft-fp.h -rw-r--r-- 5.1 KB

back to top