Johan Hovold 2c251e568e uwb: hwa-rc: fix NULL-deref at probe ...

commit daf229b15907fbfdb6ee183aac8ca428cb57e361 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Note that the dereference happens in the start callback which is called
during probe.

Fixes: de520b8bd5 ("uwb: add HWA radio controller driver")
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-03-30 09:35:17 +02:00

..

i1480

…

address.c

…

allocator.c

…

beacon.c

…

driver.c

…

drp-avail.c

…

drp-ie.c

…

drp.c

…

est.c

…

hwa-rc.c

uwb: hwa-rc: fix NULL-deref at probe

2017-03-30 09:35:17 +02:00

ie-rcv.c

…

ie.c

…

Kconfig

…

lc-dev.c

…

lc-rc.c

…

Makefile

…

neh.c

…

pal.c

…

radio.c

…

reset.c

…

rsv.c

…

scan.c

…

umc-bus.c

…

umc-dev.c

…

umc-drv.c

…

uwb-debug.c

…

uwb-internal.h

…

uwbd.c

…

whc-rc.c

…

whci.c

…