]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
staging: gigaset: fix general protection fault on probe
authorJohan Hovold <johan@kernel.org>
Mon, 2 Dec 2019 08:56:08 +0000 (09:56 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 28 Apr 2020 18:02:46 +0000 (19:02 +0100)
commit3e12695882362380f5a3100a3e449b982b459ceb
treece0bfa971c033f38a0be22ae2bebdc8d30a62a22
parentc47fa2ce171799bd5a07da612fc2b950831d4aaf
staging: gigaset: fix general protection fault on probe

commit 53f35a39c3860baac1e5ca80bf052751cfb24a99 upstream.

Fix a general protection fault when accessing the endpoint descriptors
which could be triggered by a malicious device due to missing sanity
checks on the number of endpoints.

Reported-by: syzbot+35b1c403a14f5c89eba7@syzkaller.appspotmail.com
Fixes: 07dc1f9f2f80 ("[PATCH] isdn4linux: Siemens Gigaset drivers - M105 USB DECT adapter")
Cc: Hansjoerg Lipp <hjlipp@web.de>
Cc: Tilman Schmidt <tilman@imap.cc>
Signed-off-by: Johan Hovold <johan@kernel.org>
Link: https://lore.kernel.org/r/20191202085610.12719-2-johan@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.16: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/isdn/gigaset/usb-gigaset.c