summaryrefslogtreecommitdiff
path: root/include/uapi
diff options
context:
space:
mode:
authorShuah Khan <shuahkh@osg.samsung.com>2017-12-08 00:16:47 +0300
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2017-12-20 12:07:16 +0300
commit20e825cdf7a1627f92371d45a5322ccecdebcb3b (patch)
tree5d465b3a6b207f981d1383ae8ab50976c07fc3df /include/uapi
parent99542e468b76ae180675566692e0528c4c712661 (diff)
downloadlinux-20e825cdf7a1627f92371d45a5322ccecdebcb3b.tar.xz
usbip: fix stub_rx: get_pipe() to validate endpoint number
commit 635f545a7e8be7596b9b2b6a43cab6bbd5a88e43 upstream. get_pipe() routine doesn't validate the input endpoint number and uses to reference ep_in and ep_out arrays. Invalid endpoint number can trigger BUG(). Range check the epnum and returning error instead of calling BUG(). Change caller stub_recv_cmd_submit() to handle the get_pipe() error return. Reported-by: Secunia Research <vuln@secunia.com> Signed-off-by: Shuah Khan <shuahkh@osg.samsung.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/uapi')
0 files changed, 0 insertions, 0 deletions