]> git.baikalelectronics.ru Git - kernel.git/commit
USB: usbtmc: add missing endpoint sanity check
authorJohan Hovold <johan@kernel.org>
Tue, 14 Mar 2017 16:55:45 +0000 (17:55 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 Mar 2017 04:22:58 +0000 (13:22 +0900)
commita19c5c356f5d2b8ed72d349dbe31b4f994916662
tree335724b32b1d5204ae446f6d0f1d439d3076f02b
parentdeddfaf8fa57591bb87a7a865e9abe27eab81be9
USB: usbtmc: add missing endpoint sanity check

USBTMC devices are required to have a bulk-in and a bulk-out endpoint,
but the driver failed to verify this, something which could lead to the
endpoint addresses being taken from uninitialised memory.

Make sure to zero all private data as part of allocation, and add the
missing endpoint sanity check.

Note that this also addresses a more recently introduced issue, where
the interrupt-in-presence flag would also be uninitialised whenever the
optional interrupt-in endpoint is not present. This in turn could lead
to an interrupt urb being allocated, initialised and submitted based on
uninitialised values.

Fixes: af584e432629 ("Implement an ioctl to support the USMTMC-USB488 READ_STATUS_BYTE operation.")
Fixes: be3a6997d97c ("USB: add USB test and measurement class driver")
Cc: stable <stable@vger.kernel.org> # 2.6.28
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/class/usbtmc.c