kernel-hacking-2024-linux-s.../drivers
Vladis Dronov 950336ba3e Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
The ati_remote2 driver expects at least two interfaces with one
endpoint each. If given malicious descriptor that specify one
interface or no endpoints, it will crash in the probe function.
Ensure there is at least two interfaces and one endpoint for each
interface before using it.

The full disclosure: http://seclists.org/bugtraq/2016/Mar/90

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
2016-03-23 17:29:29 -07:00
..
accessibility
acpi ACPICA: Revert "Parser: Fix for SuperName method invocation" 2016-03-08 22:58:38 +01:00
amba
android
ata ata: ahci: don't mark HotPlugCapable Ports as external/removable 2016-02-29 16:17:57 -05:00
atm
auxdisplay
base device property: fwnode->secondary may contain ERR_PTR(-ENODEV) 2016-03-09 01:07:43 +01:00
bcma
block
bluetooth
bus
cdrom
char drivers: char: random: add get_random_long() 2016-02-27 10:28:52 -08:00
clk clk: ti: omap3+: dpll: use non-locking version of clk_get_rate 2016-02-22 14:03:02 -08:00
clocksource
connector
cpufreq cpufreq: mediatek: allow building as a module 2016-03-01 02:43:05 +01:00
cpuidle
crypto
dca
devfreq PM / devfreq: tegra: Set freq in rate callback 2016-02-23 14:27:42 +09:00
dio
dma dmaengine: at_xdmac: fix residue computation 2016-03-10 16:32:36 +05:30
dma-buf
edac EDAC, sb_edac: Fix logic when computing DIMM sizes on Xeon Phi 2016-03-07 19:07:40 +01:00
eisa
extcon
firewire
firmware
fmc
fpga
gpio Merge branch 'rotary-encoder' into next 2016-03-04 11:32:40 -08:00
gpu Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux 2016-03-11 16:19:23 -08:00
hid
hsi
hv
hwmon
hwspinlock
hwtracing
i2c i2c: brcmstb: allocate correct amount of memory for regmap 2016-03-01 19:16:45 +01:00
ide
idle
iio
infiniband Additional 4.5-rc6 fixes 2016-03-04 18:06:49 -08:00
input Input: ati_remote2 - fix crashes on detecting device with invalid descriptor 2016-03-23 17:29:29 -07:00
iommu iommu/vt-d: Use BUS_NOTIFY_REMOVED_DEVICE in hotplug path 2016-02-29 23:55:16 +01:00
ipack
irqchip
isdn
leds
lguest
lightnvm
macintosh
mailbox
mcb
md
media [media] media-device: map new functions into old types for legacy API 2016-03-10 15:10:59 -03:00
memory
memstick
message
mfd
misc powerpc fixes for 4.5 #4 2016-03-06 11:08:06 -08:00
mmc
mtd Late MTD fix for v4.5: 2016-03-11 16:34:18 -08:00
net ppp: release rtnl mutex when interface creation fails 2016-03-07 16:11:31 -05:00
nfc
ntb
nubus
nvdimm nvdimm: use 'u64' for pfn flags 2016-02-23 17:17:20 -08:00
nvme nvme: fix max_segments integer truncation 2016-03-03 14:43:10 -07:00
nvmem
of of_mdio: fix kernel-doc for of_phy_connect() 2016-03-01 17:41:40 -05:00
oprofile
parisc
parport
pci PCI updates for v4.5: 2016-03-09 13:28:27 -08:00
pcmcia
perf
phy
pinctrl
platform
pnp
power
powercap
pps
ps3
ptp
pwm
rapidio
ras
regulator
remoteproc
reset
rpmsg
rtc
s390 s390/dasd: fix diag 0x250 inline assembly 2016-03-02 06:43:48 -06:00
sbus
scsi ipr: Fix regression when loading firmware 2016-02-26 17:26:02 -05:00
sfi
sh drivers: sh: Restore legacy clock domain on SuperH platforms 2016-02-25 09:05:19 +09:00
sn
soc
spi Merge remote-tracking branch 'spi/fix/rockchip' into spi-linus 2016-03-10 10:42:24 +07:00
spmi
ssb ssb: host_soc depends on sprom 2016-02-26 12:47:32 +02:00
staging media fixes for v4.5-rc7 2016-03-05 12:32:34 -08:00
target target: Drop incorrect ABORT_TASK put for completed commands 2016-03-05 20:24:47 -08:00
tc
thermal
thunderbolt
tty
uio
usb USB-serial fixes for v4.5-rc7 2016-03-03 12:37:21 -08:00
uwb
vfio vfio: fix ioctl error handling 2016-02-28 07:38:52 -07:00
vhost vhost: fix error path in vhost_init_used() 2016-03-02 17:01:49 +02:00
video fbcon: set a default value to blink interval 2016-02-26 13:19:55 +02:00
virt
virtio virtio-pci: read the right virtio_pci_notify_cap field 2016-03-02 17:01:49 +02:00
vlynq
vme
w1
watchdog Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc 2016-03-01 08:57:34 -08:00
xen Xen bug fixes for 4.5-rc5 2016-02-22 13:57:01 -08:00
zorro
Kconfig
Makefile