linux/drivers/usb/misc
Josh Boyer 02a21306af USB: iowarrior: fix oops with malicious USB descriptors
commit 4ec0ef3a82 upstream.

The iowarrior driver expects at least one valid endpoint.  If given
malicious descriptors that specify 0 for the number of endpoints,
it will crash in the probe function.  Ensure there is at least
one endpoint on the interface before using it.

The full report of this issue can be found here:
http://seclists.org/bugtraq/2016/Mar/87

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Moritz Muehlenhoff <jmm@inutil.org>
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
History 2016-03-29 15:56:13 +01:00
..
sisusbvga USB: sisusb: add device id for Magic Control USB video 2014-10-05 13:40:57 -07:00
adutux.c USB: adutux: NULL dereferences on disconnect 2015-02-04 10:58:29 +00:00
appledisplay.c USB: appledisplay: fix race between reading and writing from the device 2014-05-27 16:03:57 -07:00
cypress_cy7c63.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
cytherm.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ehset.c usb: ehci: Add support for SINGLE_STEP_SET_FEATURE test of EHSET 2013-08-12 13:13:32 -07:00
emi26.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
emi62.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ezusb.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ftdi-elan.c usb: ftdi-elan: Use pr_<level> 2014-04-24 13:13:59 -07:00
idmouse.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
iowarrior.c USB: iowarrior: fix oops with malicious USB descriptors 2016-03-29 15:56:13 +01:00
isight_firmware.c Merge branch 'usb-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb 2012-01-09 12:09:47 -08:00
Kconfig USB: ELAN: Remove useless "default M" lines 2014-02-11 13:47:13 -08:00
ldusb.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
legousbtower.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
Makefile usb: misc: EHSET Test Fixture device driver for host compliance 2013-07-25 11:49:30 -07:00
rio500.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
rio500_usb.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
trancevibrator.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
usb3503.c usb: usb5303: add support for reference clock specified in device tree 2014-05-27 16:19:04 -07:00
usb_u132.h Merge master.kernel.org:/pub/scm/linux/kernel/git/gregkh/usb-2.6 2006-12-01 16:41:58 -08:00
usblcd.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
usbled.c usb/misc/usbled: Add Riso Kagaku Webmail Notifier 2014-02-11 14:00:16 -08:00
usbsevseg.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
usbtest.c USB: usbtest: add a timeout for scatter-gather tests 2014-06-17 17:05:50 -07:00
uss720.c USB: uss720: fix DMA-buffer allocation 2013-08-14 13:51:02 -07:00
yurex.c USB: yurex: fix race between probe() and read() 2014-05-27 16:03:58 -07:00