linux/drivers/usb/misc
Josh Boyer 4ec0ef3a82 USB: iowarrior: fix oops with malicious USB descriptors
The iowarrior driver expects at least one valid endpoint.  If given
malicious descriptors that specify 0 for the number of endpoints,
it will crash in the probe function.  Ensure there is at least
one endpoint on the interface before using it.

The full report of this issue can be found here:
http://seclists.org/bugtraq/2016/Mar/87

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-03-18 09:19:02 -07:00
..
sisusbvga usb-misc: sisusbvga: fix error path 2016-01-24 21:04:54 -08:00
Kconfig Revert "usb: add HAS_IOMEM dependency to USB_APPLEDISPLAY" 2016-02-20 14:21:41 -08:00
Makefile usb: Add driver for Altus Metrum ChaosKey device (v2) 2015-03-26 10:47:11 +01:00
adutux.c USB: adutux: NULL dereferences on disconnect 2014-11-26 19:50:15 -08:00
appledisplay.c USB: appledisplay: Deletion of a check before backlight_device_unregister() 2015-03-18 16:56:40 +01:00
chaoskey.c usb/misc/chaoskey: introduce an URB for asynchronous reads 2016-02-20 20:12:21 -08:00
cypress_cy7c63.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
cytherm.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ehset.c usb: ehci: Add support for SINGLE_STEP_SET_FEATURE test of EHSET 2013-08-12 13:13:32 -07:00
emi26.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
emi62.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ezusb.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
ftdi-elan.c usb: misc: ftdi-elan: Simplify return statement 2015-08-05 12:37:21 -07:00
idmouse.c USB: idmouse.c: Put the interface on error 2016-03-03 19:44:06 -08:00
iowarrior.c USB: iowarrior: fix oops with malicious USB descriptors 2016-03-18 09:19:02 -07:00
isight_firmware.c Merge branch 'usb-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb 2012-01-09 12:09:47 -08:00
ldusb.c usb, HID: Remove Vernier devices from lsusb and hid_ignore_list 2015-06-01 14:44:08 +02:00
legousbtower.c USB: legotower: use msecs_to_jiffies for time conversion 2015-03-18 16:20:34 +01:00
lvstest.c Pratyush Anand has moved 2015-06-25 17:00:38 -07:00
rio500.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
rio500_usb.h
trancevibrator.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
usb3503.c usb: misc: usb3503: Use i2c_add_driver helper macro 2015-10-24 19:53:53 -07:00
usb_u132.h
usblcd.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
usbled.c usb/misc/usbled: Add Riso Kagaku Webmail Notifier 2014-02-11 14:00:16 -08:00
usbsevseg.c usb: delete non-required instances of include <linux/init.h> 2014-01-08 15:01:39 -08:00
usbtest.c usb: misc: usbtest: Remove timeval usage 2015-12-01 14:52:58 -08:00
uss720.c USB: uss720.c: move assignment out of if () block 2015-05-10 16:01:12 +02:00
yurex.c usb: yurex: fixed sparse warning of incorrect type 2014-11-03 15:34:00 -08:00