]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
authorVladis Dronov <vdronov@redhat.com>
Wed, 23 Mar 2016 18:53:46 +0000 (11:53 -0700)
committerJiri Slaby <jslaby@suse.cz>
Mon, 11 Apr 2016 14:44:25 +0000 (16:44 +0200)
commitca216547bc4a3e7d73043f4d9b42d6461cf3067f
treecc70515ad04d386055b5e33bab7c931785d5938b
parentb18626baf7a8b5bef098204516641b0701419d85
Input: ati_remote2 - fix crashes on detecting device with invalid descriptor

commit 950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d upstream.

The ati_remote2 driver expects at least two interfaces with one
endpoint each. If given malicious descriptor that specify one
interface or no endpoints, it will crash in the probe function.
Ensure there is at least two interfaces and one endpoint for each
interface before using it.

The full disclosure: http://seclists.org/bugtraq/2016/Mar/90

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Signed-off-by: Vladis Dronov <vdronov@redhat.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
drivers/input/misc/ati_remote2.c