voidanix
/
android_kernel_lge_bullhead
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
android_kernel_lge_bullhead/drivers/uwb
History
Johan Hovold 735a19db3b uwb: hwa-rc: fix NULL-deref at probe 
commit daf229b15907fbfdb6ee183aac8ca428cb57e361 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Note that the dereference happens in the start callback which is called
during probe.

Fixes: de520b8bd5 ("uwb: add HWA radio controller driver")
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Willy Tarreau <w@1wt.eu>
 		2017-06-08 00:47:05 +02:00
..
i1480 uwb: i1480-dfu: fix NULL-deref at probe 2017-06-08 00:47:05 +02:00
Kconfig drivers/uwb: remove depends on CONFIG_EXPERIMENTAL 2012-11-15 17:39:03 -08:00
Makefile uwb: Remove the WLP subsystem and drivers 2010-10-25 14:03:45 +01:00
address.c uwb: use '%pM' format to print MAC address 2010-10-22 10:21:40 -07:00
allocator.c uwb: use for_each_clear_bit() 2012-03-23 16:58:34 -07:00
beacon.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
driver.c Fix common misspellings 2011-03-31 11:26:23 -03:00
drp-avail.c
…
drp-ie.c include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h 2010-03-30 22:02:32 +09:00
drp.c Fix common misspellings 2011-03-31 11:26:23 -03:00
est.c uwb: Use kcalloc instead of kzalloc to allocate array 2011-12-09 16:18:20 -08:00
hwa-rc.c uwb: hwa-rc: fix NULL-deref at probe 2017-06-08 00:47:05 +02:00
ie-rcv.c
…
ie.c uwb: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required 2011-10-31 19:32:19 -04:00
lc-dev.c uwb: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required 2011-10-31 19:32:19 -04:00
lc-rc.c driver-core: constify data for class_find_device() 2013-02-06 12:18:56 -08:00
neh.c uwb: fix use of del_timer_sync() in interrupt 2012-04-18 13:15:51 -07:00
pal.c uwb: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required 2011-10-31 19:32:19 -04:00
radio.c uwb: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required 2011-10-31 19:32:19 -04:00
reset.c uwb: fix uwb_dev_unlock() missed at an error path in uwb_rc_cmd_async() 2012-11-26 15:58:43 -08:00
rsv.c uwb: rename random32() to prandom_u32() 2013-04-29 18:28:43 -07:00
scan.c drivers/uwb: fix implicit use of stat.h 2011-10-31 19:32:18 -04:00
umc-bus.c umc-bus.c: fix usage of device_trylock 2012-10-25 11:39:31 -07:00
umc-dev.c uwb: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required 2011-10-31 19:32:19 -04:00
umc-drv.c uwb: Add export.h for EXPORT_SYMBOL/THIS_MODULE as required 2011-10-31 19:32:19 -04:00
uwb-debug.c simple_open: automatically convert to simple_open() 2012-04-05 15:25:50 -07:00
uwb-internal.h Remove unneeded version.h include from drivers/uwb/ 2011-09-15 14:57:08 +02:00
uwbd.c uwb: Fix misspelling of neighbourhood in comment 2011-07-21 14:03:41 +02:00
whc-rc.c treewide: Convert uses of struct resource to resource_size(ptr) 2011-06-10 14:55:36 +02:00
whci.c uwb: Add module.h to the real uwb modular users. 2011-10-31 19:32:19 -04:00