diff options
author | Shuah Khan <shuahkh@osg.samsung.com> | 2017-12-08 00:16:47 +0300 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-12-20 12:07:16 +0300 |
commit | 20e825cdf7a1627f92371d45a5322ccecdebcb3b (patch) | |
tree | 5d465b3a6b207f981d1383ae8ab50976c07fc3df /include/uapi | |
parent | 99542e468b76ae180675566692e0528c4c712661 (diff) | |
download | linux-20e825cdf7a1627f92371d45a5322ccecdebcb3b.tar.xz |
usbip: fix stub_rx: get_pipe() to validate endpoint number
commit 635f545a7e8be7596b9b2b6a43cab6bbd5a88e43 upstream.
get_pipe() routine doesn't validate the input endpoint number
and uses to reference ep_in and ep_out arrays. Invalid endpoint
number can trigger BUG(). Range check the epnum and returning
error instead of calling BUG().
Change caller stub_recv_cmd_submit() to handle the get_pipe()
error return.
Reported-by: Secunia Research <vuln@secunia.com>
Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/uapi')
0 files changed, 0 insertions, 0 deletions