linux/drivers
Robert Dobrowolski b016f99b40 usb: hcd: out of bounds access in for_each_companion
[ Upstream commit e86103a757 ]

On BXT platform Host Controller and Device Controller figure as
same PCI device but with different device function. HCD should
not pass data to Device Controller but only to Host Controllers.
Checking if companion device is Host Controller, otherwise skip.

Cc: <stable@vger.kernel.org>
Signed-off-by: Robert Dobrowolski <robert.dobrowolski@linux.intel.com>
Acked-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
History 2016-04-20 01:13:12 -04:00
..
accessibility printk: move braille console support into separate braille.[ch] files 2013-07-31 14:41:03 -07:00
acpi ACPI: Revert "ACPI / video: Add Dell Inspiron 5737 to the blacklist" 2016-04-13 17:14:25 -04:00
amba ARM: 8334/1: amba: tegra-ahb: detect and correct bogus base address 2015-04-02 10:03:55 +01:00
android drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE 2016-03-07 12:33:19 -05:00
ata Adding Intel Lewisburg device IDs for SATA 2016-03-07 12:29:10 -05:00
atm drivers: atm: nicstar: remove ifdef'd out skb destructors 2015-03-10 13:34:53 -04:00
auxdisplay auxdisplay: ks0108: fix refcount 2015-09-21 10:05:42 -07:00
base cpu/cacheinfo: Fix teardown path 2015-10-22 14:43:23 -07:00
bcma Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus 2015-04-17 15:50:54 -04:00
block rbd: use GFP_NOIO consistently for request allocations 2016-04-20 01:08:50 -04:00
bluetooth Bluetooth: btusb: Add a new AR3012 ID 13d3:3472 2016-04-18 08:50:53 -04:00
bus bus: imx-weim: Take the 'status' property value into account 2016-04-18 08:50:55 -04:00
cdrom block,scsi: fixup blk_get_request dead queue scenarios 2014-08-28 10:03:46 -06:00
char tpm_crb: tpm2_shutdown() must be called before tpm_chip_unregister() 2016-04-18 08:50:37 -04:00
clk clk: rockchip: add hclk_cpubus to the list of rk3188 critical clocks 2016-04-18 08:50:33 -04:00
clocksource clocksource/drivers/vt8500: Increase the minimum delta 2016-02-03 14:01:46 -05:00
connector connector: bump skb->users before callback invocation 2016-01-31 11:23:35 -08:00
cpufreq cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL) 2015-11-09 14:33:39 -08:00
cpuidle tick/idle/powerpc: Do not register idle states with CPUIDLE_FLAG_TIMER_STOP set in periodic mode 2015-07-10 09:49:35 -07:00
crypto crypto: atmel - fix checks of error code returned by devm_ioremap_resource() 2016-04-18 08:51:10 -04:00
dca dca: convert to idr_alloc() 2013-02-27 19:10:15 -08:00
devfreq PM / devfreq: tegra: Register governor on module init 2015-03-31 13:17:15 +09:00
dio m68k: don't export static inline functions 2009-12-06 11:18:28 +01:00
dma dmaengine: dw: fix master selection 2016-04-20 01:08:56 -04:00
dma-buf dma-buf: cleanup dma_buf_export() to make it easily extensible 2015-04-21 14:47:16 +05:30
edac EDAC/sb_edac: Fix computation of channel address 2016-04-18 08:50:52 -04:00
eisa Revert "EISA: Initialize device before its resources" 2014-01-17 14:57:29 -07:00
extcon extcon: usb-gpio: register extcon device before IRQ registration 2015-04-27 11:06:05 +09:00
firewire firewire: ohci: fix JMicron JMB38x IT context discovery 2015-12-14 21:24:35 -08:00
firmware efi: Add pstore variables to the deletion whitelist 2016-04-11 22:44:23 -04:00
fmc Merge 3.14-rc5 into char-misc-next 2014-03-02 19:53:09 -08:00
gpio gpio: pca953x: Use correct u16 value for register word write 2016-04-20 01:08:53 -04:00
gpu drm/i915: Fix race condition in intel_dp_destroy_mst_connector() 2016-04-20 01:03:45 -04:00
hid HID: usbhid: fix inconsistent reset/resume/reset-resume behavior 2016-04-19 10:14:04 -04:00
hsi HSI: cmt_speech: fix error return code 2015-04-05 14:45:27 +02:00
hv Drivers: hv: hv_balloon: correctly handle num_pages>INT_MAX case 2015-04-03 16:20:12 +02:00
hwmon hwmon: (gpio-fan) Remove un-necessary speed_index lookup for thermal hook 2016-03-07 12:33:13 -05:00
hwspinlock hwspinlock: drop owner assignment from platform_drivers 2014-10-20 16:20:37 +02:00
hwtracing/coresight coresight: checking for NULL string in coresight_name_match() 2016-02-01 12:22:21 -05:00
i2c i2c: mv64xxx: really allow I2C offloading 2015-11-09 14:33:37 -08:00
ide Merge branch 'for-4.1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata 2015-05-11 10:54:20 -07:00
idle Power management and ACPI updates for v4.1-rc1 2015-04-14 20:21:54 -07:00
iio iio: pressure: mpl115: fix temperature offset sign 2016-04-11 22:07:36 -04:00
infiniband iser-target: Separate flows for np listeners and connections cma events 2016-04-18 08:50:54 -04:00
input Input: ati_remote2 - fix crashes on detecting device with invalid descriptor 2016-04-18 08:51:08 -04:00
iommu iommu/amd: Apply workaround for ATS write permission check 2016-03-09 13:15:09 -05:00
ipack ipoctal: clear break interrupt as soon as it occurs 2014-09-23 23:26:42 -07:00
irqchip irqchip/omap-intc: Add support for spurious irq handling 2016-04-13 17:14:24 -04:00
isdn ppp, slip: Validate VJ compression slot parameters completely 2016-01-31 11:23:37 -08:00
leds leds/led-class: Add missing put_device() 2015-10-22 14:43:14 -07:00
lguest lguest: fix out-by-one error in address checking. 2015-05-27 09:57:21 -07:00
macintosh windfarm: decrement client count when unregistering 2015-10-22 14:43:12 -07:00
mailbox mailbox: arm_mhu: add driver for ARM MHU controller 2015-03-17 11:12:01 +05:30
mcb mcb: request_mem_region() returns NULL on error 2015-04-03 16:15:30 +02:00
md md: multipath: don't hardcopy bio in .make_request path 2016-04-18 08:50:58 -04:00
media [media] au0828: Fix dev_state handling 2016-04-20 01:03:43 -04:00
memory iommu/tegra-smmu: Parameterize number of TLB lines 2015-09-29 19:26:14 +02:00
memstick memstick: mspro_block: add missing curly braces 2015-04-17 09:04:09 -04:00
message i2o: move to staging 2015-02-03 15:58:39 -08:00
mfd mfd: twl6040: Fix deferred probe handling for clk32k 2015-12-09 14:03:20 -05:00
misc mei: bus: move driver api functions at the start of the file 2016-04-18 08:50:35 -04:00
mmc mmc: atmel-mci: Check pdata for NULL before dereferencing it at DMA config 2016-04-18 08:51:01 -04:00
mtd mtd: onenand: fix deadlock in onenand_block_markbad 2016-04-18 08:50:40 -04:00
net rapidio/rionet: fix deadlock on SMP 2016-04-18 08:51:07 -04:00
nfc NFC: st21nfca: fix use of uninitialized variables in error path 2015-09-29 19:25:55 +02:00
ntb ntb: initialize max_mw for Atom before using it 2015-06-11 09:27:24 -04:00
nubus nubus: Remove superfluous interrupt disable/restore 2014-10-27 11:03:19 +01:00
of of: alloc anywhere from memblock if range not specified 2016-04-18 08:50:47 -04:00
oprofile Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2015-04-26 17:22:07 -07:00
parisc parisc iommu: fix panic due to trying to allocate too large region 2016-01-31 11:23:39 -08:00
parport parport: parport_atari: Remove obsolete IRQ_TYPE_SLOW 2015-01-15 13:44:50 +01:00
pci PCI: Disable IO/MEM decoding for devices with non-compliant BARs 2016-04-18 08:50:40 -04:00
pcmcia pcmcia: sa11x0: fix missing clk_put() in sa11x0 socket drivers 2015-10-22 14:43:22 -07:00
phy phy: twl4030-usb: Fix unbalanced pm_runtime_enable on module reload 2016-03-04 10:25:40 -05:00
pinctrl pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing 2016-04-18 08:50:48 -04:00
platform ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list 2016-04-18 08:51:08 -04:00
pnp ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage 2015-08-03 09:29:14 -07:00
power PM / AVS: rockchip-io: depend on CONFIG_POWER_AVS 2015-10-22 14:43:22 -07:00
powercap powercap / RAPL: Add support for Intel Skylake processors 2015-04-15 23:06:16 +02:00
pps pps: clients: drop owner assignment from platform_drivers 2014-10-20 16:21:28 +02:00
ps3 ps3: Fix trivial typos in comment and debug message 2015-03-26 15:23:17 +11:00
ptp ptp: remove 32 bit get/set methods. 2015-03-31 12:01:19 -04:00
pwm pwm: img: Impose upper and lower timebase steps value 2015-05-19 16:07:40 +02:00
rapidio Merge branch 'for-linus' of git://git.infradead.org/users/vkoul/slave-dma 2015-02-18 08:49:20 -08:00
ras trace, RAS: Add eMCA trace event interface 2014-06-25 13:26:47 -07:00
regulator regulator: pbias: Fix broken pbias disable functionality 2015-09-21 10:05:43 -07:00
remoteproc remoteproc: add IOMMU hardware capability flag 2015-03-12 10:43:26 +02:00
reset reset: sunxi: fix spinlock initialization 2015-01-16 19:11:31 -08:00
rpmsg virtio_rpmsg: set DRIVER_OK before using device 2015-03-13 15:55:42 +10:30
rtc rtc: abx80x: fix RTC write bit 2015-09-29 19:26:11 +02:00
s390 s390/dasd: fix refcount for PAV reassignment 2016-03-04 10:25:41 -05:00
sbus drivers/sbus/char/envctrl.c: ignore orderly_poweroff return value 2015-04-15 16:35:23 -07:00
scsi sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes 2016-04-20 01:03:43 -04:00
sfi SFI: fix compiler warnings 2014-12-03 18:49:20 -05:00
sh drivers: sh: Remove test for now unsupported sh7372 2015-04-27 13:08:14 +09:00
sn Drivers: misc: remove __dev* attributes. 2013-01-03 15:57:16 -08:00
soc soc/tegra: pmc: Avoid usage of uninitialized variable 2015-09-21 10:05:43 -07:00
spi spi: spidev: fix possible NULL dereference 2015-10-22 14:43:15 -07:00
spmi spmi: pmic_arb: remove ARM build time dependency 2015-04-03 16:15:30 +02:00
ssb SSB: Fix handling of ssb_pmu_get_alp_clock() 2015-06-09 16:38:06 +02:00
staging staging: comedi: ni_mio_common: fix the ni_write[blw]() functions 2016-04-18 08:51:07 -04:00
target target: Fix target_release_cmd_kref shutdown comp leak 2016-04-18 08:51:06 -04:00
tc TC: Error handling clean-ups 2014-11-24 07:45:25 +01:00
thermal Thermal: Ignore invalid trip points 2016-04-18 08:51:02 -04:00
thunderbolt thunderbolt: Clear hops before overwriting 2014-08-26 14:54:48 -07:00
tty pty: make sure super_block is still valid in final /dev/tty close 2016-02-28 00:09:50 -05:00
uio Revert "uio: constify of_device_id array" 2015-04-03 16:04:21 +02:00
usb usb: hcd: out of bounds access in for_each_companion 2016-04-20 01:13:12 -04:00
uwb uwb: Remove umc bus legacy suspend/resume support 2015-03-18 17:27:03 +01:00
vfio vfio: fix ioctl error handling 2016-03-09 13:15:13 -05:00
vhost target: Remove first argument of target_{get,put}_sess_cmd() 2016-02-28 00:09:36 -05:00
video fbdev: select versatile helpers for the integrator 2015-10-22 14:43:20 -07:00
virt drivers: clean-up prom.h implicit includes 2013-10-09 20:04:04 -05:00
virtio virtio: virtio 1.0 cs04 spec compliance for reset 2016-04-20 01:08:53 -04:00
vlynq drivers/vlynq/vlynq.c: fix another resource size off by 1 error 2014-01-23 16:36:55 -08:00
vme vme: tsi148: Master windows support USERx and CR/CSR accesses, not slaves 2015-03-06 17:03:22 -08:00
w1 w1_therm reference count family data 2015-08-03 09:29:11 -07:00
watchdog watchdog: rc32434_wdt: fix ioctl error handling 2016-04-18 08:50:44 -04:00
xen xen/events: Mask a moving irq 2016-04-20 01:03:44 -04:00
zorro zorro: drop owner assignment from platform_drivers 2014-10-20 16:21:57 +02:00
Kconfig i2o: move to staging 2015-02-03 15:58:39 -08:00
Makefile coresight: moving to new "hwtracing" directory 2015-04-03 16:17:04 +02:00