projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c39bafb) | patch
ath9k_htc: fix NULL-deref at probe
authorJohan Hovold <johan@kernel.org>
Mon, 13 Mar 2017 12:44:20 +0000 (13:44 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 May 2017 13:44:35 +0000 (15:44 +0200)
commitadc6647c4f0f6f7f3d838d1ccd7398695b6b0702
tree0ff01836179c7bd0e29fa098a3f8edba3c969c77tree
parentc39bafb9ee7a2aaaf71cdcac7bd583ee741b3da2commit | diff
ath9k_htc: fix NULL-deref at probe

commit ebeb36670ecac36c179b5fb5d5c88ff03ba191ec upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Fixes: 36bcce430657 ("ath9k_htc: Handle storage devices")
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/ath/ath9k/hif_usb.c diff | blob | history