]> git.baikalelectronics.ru Git - kernel.git/commit
Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
authorVladis Dronov <vdronov@redhat.com>
Wed, 23 Mar 2016 18:53:46 +0000 (11:53 -0700)
committerDmitry Torokhov <dmitry.torokhov@gmail.com>
Thu, 24 Mar 2016 00:29:29 +0000 (17:29 -0700)
commit18f80e1c8fa79267d0fb8337892404b5f10ab27e
treeed4c695d4b84106f45b362ef3ce2785dde7b8d03
parent76c2c58505bb6b68be1a85981883449dad645b3e
Input: ati_remote2 - fix crashes on detecting device with invalid descriptor

The ati_remote2 driver expects at least two interfaces with one
endpoint each. If given malicious descriptor that specify one
interface or no endpoints, it will crash in the probe function.
Ensure there is at least two interfaces and one endpoint for each
interface before using it.

The full disclosure: http://seclists.org/bugtraq/2016/Mar/90

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
drivers/input/misc/ati_remote2.c