Johan Hovold 5654699fb3 USB: serial: fix potential heap buffer overflow ...

Make sure to verify the number of ports requested by subdriver to avoid
writing beyond the end of fixed-size array in interface data.

The current usb-serial implementation is limited to eight ports per
interface but failed to verify that the number of ports requested by a
subdriver (which could have been determined from device descriptors) did
not exceed this limit.

Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-08-27 13:23:52 -07:00

..

aircable.c

…

ark3116.c

…

belkin_sa.c

…

belkin_sa.h

…

bus.c

USB: serial: fix potential runtime pm imbalance at device remove

2014-05-27 15:04:08 -07:00

ch341.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

console.c

…

cp210x.c

USB: serial: cp210x: Removing unncessary usb_reset_device on startup

2014-07-17 17:12:13 -07:00

cyberjack.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

cypress_m8.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

cypress_m8.h

…

digi_acceleport.c

…

empeg.c

…

ezusb_convert.pl

…

f81232.c

…

ftdi_sio_ids.h

USB: ftdi_sio: Added PID for new ekey device

2014-08-18 13:09:27 +02:00

ftdi_sio.c

USB: ftdi_sio: Added PID for new ekey device

2014-08-18 13:09:27 +02:00

ftdi_sio.h

…

garmin_gps.c

…

generic.c

USB: serial: add missing braces

2014-03-12 12:44:50 -07:00

io_16654.h

…

io_edgeport.c

…

io_edgeport.h

…

io_ionsp.h

…

io_tables.h

…

io_ti.c

USB: io_ti: fix firmware download on big-endian machines (part 2)

2014-05-27 15:12:57 -07:00

io_ti.h

…

io_usbvend.h

USB: io_ti: fix firmware download on big-endian machines (part 2)

2014-05-27 15:12:57 -07:00

ipaq.c

…

ipw.c

…

ir-usb.c

…

iuu_phoenix.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

iuu_phoenix.h

…

Kconfig

…

keyspan_pda.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

keyspan_usa26msg.h

…

keyspan_usa28msg.h

…

keyspan_usa49msg.h

…

keyspan_usa67msg.h

…

keyspan_usa90msg.h

…

keyspan.c

USB: keyspan: fix potential null pointer dereference

2014-05-27 15:14:13 -07:00

keyspan.h

…

kl5kusb105.c

USB: kl5kusb105: Remove klsi_105_tiocmset function

2014-07-09 15:44:06 -07:00

kl5kusb105.h

…

kobil_sct.c

USB: kobil_sct: fix control requests without data stage

2014-05-27 15:04:08 -07:00

kobil_sct.h

…

Makefile

…

Makefile-keyspan_pda_fw

…

mct_u232.c

…

mct_u232.h

…

metro-usb.c

…

mos7720.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

mos7840.c

drivers/usb/serial/mos7840.c: remove unnecessary null test before kfree

2014-07-09 16:25:22 -07:00

mxuport.c

…

navman.c

…

omninet.c

…

opticon.c

…

option.c

Revert "USB: option,zte_ev: move most ZTE CDMA devices to zte_ev"

2014-08-18 13:09:25 +02:00

oti6858.c

…

oti6858.h

…

pl2303.c

USB: serial: pl2303: add device id for ztek device

2014-08-18 13:09:27 +02:00

pl2303.h

USB: serial: pl2303: add device id for ztek device

2014-08-18 13:09:27 +02:00

qcaux.c

…

qcserial.c

usb: qcserial: add additional Sierra Wireless QMI devices

2014-05-29 11:20:26 -07:00

quatech2.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

safe_serial.c

…

sierra.c

USB: sierra: do not resume I/O on closing ports

2014-05-27 15:04:05 -07:00

spcp8x5.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

ssu100.c

…

symbolserial.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

ti_usb_3410_5052.c

USB: serial: add missing newlines to dev_<level> messages.

2014-03-12 12:44:50 -07:00

ti_usb_3410_5052.h

…

usb_debug.c

…

usb_wwan.c

Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip into next

2014-06-03 12:57:53 -07:00

usb-serial-simple.c

…

usb-serial.c

USB: serial: fix potential heap buffer overflow

2014-08-27 13:23:52 -07:00

usb-wwan.h

USB: usb_wwan: do not resume I/O on closing ports

2014-05-27 15:04:08 -07:00

visor.c

…

visor.h

…

whiteheat.c

USB: whiteheat: Added bounds checking for bulk command response

2014-08-24 14:15:08 -05:00

whiteheat.h

…

wishbone-serial.c

…

xsens_mt.c

…

zte_ev.c

USB: zte_ev: remove duplicate Qualcom PID

2014-08-18 13:09:26 +02:00