USB: digi_acceleport: do sanity checking for the number of ports
authorOliver Neukum <oneukum@suse.com>
Thu, 31 Mar 2016 16:04:26 +0000 (12:04 -0400)
committerBen Hutchings <ben@decadent.org.uk>
Sat, 30 Apr 2016 22:05:22 +0000 (00:05 +0200)
commit3867082924673a9371792e822fe3ed403eeff4d9
treeeb2ee572b3dac100c2d50d1b550f3cc764ff0614
parent2f974f8dc1e451dedb79eeac94f24e667c09917a
USB: digi_acceleport: do sanity checking for the number of ports

commit 5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f upstream.

The driver can be crashed with devices that expose crafted descriptors
with too few endpoints.

See: http://seclists.org/bugtraq/2016/Mar/61

Signed-off-by: Oliver Neukum <ONeukum@suse.com>
[johan: fix OOB endpoint check and add error messages ]
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/usb/serial/digi_acceleport.c