summaryrefslogtreecommitdiffstats
path: root/drivers/usb
diff options
context:
space:
mode:
authorAlan Stern <stern@rowland.harvard.edu>2019-05-07 12:39:47 -0400
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2019-05-21 10:08:56 +0200
commit31e0456de5be379b10fea0fa94a681057114a96e (patch)
tree3b520733410fee3507232031b449cc85fbfbb14c /drivers/usb
parent9610450ea31eb061b9914de2bf6ced424956182d (diff)
downloadlinux-31e0456de5be379b10fea0fa94a681057114a96e.tar.bz2
media: usb: siano: Fix general protection fault in smsusb
The syzkaller USB fuzzer found a general-protection-fault bug in the smsusb part of the Siano DVB driver. The fault occurs during probe because the driver assumes without checking that the device has both IN and OUT endpoints and the IN endpoint is ep1. By slightly rearranging the driver's initialization code, we can make the appropriate checks early on and thus avoid the problem. If the expected endpoints aren't present, the new code safely returns -ENODEV from the probe routine. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Reported-and-tested-by: syzbot+53f029db71c19a47325a@syzkaller.appspotmail.com CC: <stable@vger.kernel.org> Reviewed-by: Johan Hovold <johan@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb')
0 files changed, 0 insertions, 0 deletions