Johan Hovold daf229b159 uwb: hwa-rc: fix NULL-deref at probe ...

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Note that the dereference happens in the start callback which is called
during probe.

Fixes: de520b8bd5 ("uwb: add HWA radio controller driver")
Cc: stable <stable@vger.kernel.org>     # 2.6.28
Cc: Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-03-14 17:07:30 +08:00

..

i1480

…

address.c

…

allocator.c

…

beacon.c

…

driver.c

…

drp-avail.c

…

drp-ie.c

…

drp.c

uwb: drp: Use setup_timer

2015-10-24 19:52:53 -07:00

est.c

…

hwa-rc.c

uwb: hwa-rc: fix NULL-deref at probe

2017-03-14 17:07:30 +08:00

ie-rcv.c

…

ie.c

…

Kconfig

…

lc-dev.c

…

lc-rc.c

uwb: fix device reference leaks

2016-11-01 09:04:04 -06:00

Makefile

…

neh.c

uwb: neh: Use setup_timer

2015-10-24 19:52:53 -07:00

pal.c

uwb: fix device reference leaks

2016-11-01 09:04:04 -06:00

radio.c

…

reset.c

…

rsv.c

uwb: rsv: Use setup_timer

2015-10-24 19:52:53 -07:00

scan.c

…

umc-bus.c

uwb: Remove umc bus legacy suspend/resume support

2015-03-18 17:27:03 +01:00

umc-dev.c

…

umc-drv.c

…

uwb-debug.c

debugfs: Pass bool pointer to debugfs_create_bool()

2015-10-04 11:36:07 +01:00

uwb-internal.h

…

uwbd.c

uwb: uwbd() is not freezable kthread

2015-12-01 14:26:33 -08:00

whc-rc.c

…

whci.c

…