Johan Hovold 4ce362711d uwb: i1480-dfu: fix NULL-deref at probe ...

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Note that the dereference happens in the cmd and wait_init_done
callbacks which are called during probe.

Fixes: 1ba47da52712 ("uwb: add the i1480 DFU driver")
Cc: stable <stable@vger.kernel.org>     # 2.6.28
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-03-14 17:07:31 +08:00

..

i1480

uwb: i1480-dfu: fix NULL-deref at probe

2017-03-14 17:07:31 +08:00

address.c

…

allocator.c

…

beacon.c

…

driver.c

…

drp-avail.c

…

drp-ie.c

…

drp.c

…

est.c

…

hwa-rc.c

uwb: hwa-rc: fix NULL-deref at probe

2017-03-14 17:07:30 +08:00

ie-rcv.c

…

ie.c

…

Kconfig

…

lc-dev.c

…

lc-rc.c

…

Makefile

…

neh.c

…

pal.c

…

radio.c

…

reset.c

…

rsv.c

…

scan.c

…

umc-bus.c

…

umc-dev.c

…

umc-drv.c

…

uwb-debug.c

…

uwb-internal.h

…

uwbd.c

…

whc-rc.c

…

whci.c

…