Johan Hovold dcf879cb9e mmc: ushc: fix NULL-deref at probe ...

commit 181302dc72 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Fixes: 53f3a9e26e ("mmc: USB SD Host Controller (USHC) driver")
Cc: David Vrabel <david.vrabel@csr.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Ulf Hansson <ulf.hansson@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-03-30 09:35:17 +02:00

..

accessibility

…

acpi

ACPI / video: skip evaluating _DOD when it does not exist

2017-03-26 12:13:17 +02:00

amba

…

android

ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct

2016-11-10 16:36:33 +01:00

ata

libata: apply MAX_SEC_1024 to all CX1-JB*-HP devices

2017-02-09 08:02:45 +01:00

atm

…

auxdisplay

…

base

base/memory, hotplug: fix a kernel oops in show_valid_zones()

2017-02-09 08:02:47 +01:00

bcma

bcma: use (get|put)_device when probing/removing device driver

2017-03-12 06:37:30 +01:00

block

loop: fix LO_FLAGS_PARTSCAN hang

2017-03-12 06:37:27 +01:00

bluetooth

Bluetooth: Add another AR3012 04ca:3018 device

2017-03-15 09:57:11 +08:00

bus

bus: vexpress-config: fix device reference leak

2017-01-19 20:17:22 +01:00

cdrom

…

char

tpm_tis: Use devm_free_irq not free_irq

2017-03-26 12:13:18 +02:00

clk

clk: imx31: fix rewritten input argument of mx31_clocks_init()

2017-01-12 11:22:49 +01:00

clocksource

clocksource/exynos_mct: Clear interrupt when cpu is shut down

2017-01-26 08:23:48 +01:00

connector

…

cpufreq

cpufreq: Fix and clean up show_cpuinfo_cur_freq()

2017-03-26 12:13:19 +02:00

cpuidle

…

crypto

crypto: caam - fix AEAD givenc descriptors

2017-01-06 11:16:12 +01:00

dca

…

devfreq

…

dio

…

dma

dmaengine: ipu: Make sure the interrupt routine checks all interrupts.

2017-03-12 06:37:30 +01:00

dma-buf

…

edac

…

eisa

…

extcon

…

firewire

firewire: net: fix fragmented datagram_size off-by-one

2016-11-10 16:36:35 +01:00

firmware

…

fmc

…

fpga

…

gpio

…

gpu

drm/amdgpu: add missing irq.h include

2017-03-26 12:13:18 +02:00

hid

HID: wacom: Fix poor prox handling in 'wacom_pl_irq'

2017-02-09 08:02:46 +01:00

hsi

…

hv

Drivers: hv: avoid vfree() on crash

2017-03-26 12:13:18 +02:00

hwmon

hwmon: (g762) Fix overflows and crash seen when writing limit attributes

2017-01-12 11:22:48 +01:00

hwspinlock

…

hwtracing

…

i2c

i2c: fix kernel memory disclosure in dev interface

2017-01-19 20:17:20 +01:00

ide

…

idle

…

iio

iio: pressure: mpl3115: do not rely on structure field ordering

2017-03-12 06:37:28 +01:00

infiniband

IB/srp: Fix race conditions related to task management

2017-03-15 09:57:13 +08:00

input

Input: sur40 - validate number of endpoints before using them

2017-03-30 09:35:15 +02:00

iommu

iommu/vt-d: Tylersburg isoch identity map check is done too late.

2017-03-12 06:37:25 +01:00

ipack

…

irqchip

irqchip/bcm7038-l1: Implement irq_cpu_offline() callback

2017-01-12 11:22:49 +01:00

isdn

isdn/gigaset: fix NULL-deref at probe

2017-03-26 12:13:19 +02:00

leds

…

lguest

…

lightnvm

…

macintosh

…

mailbox

…

mcb

…

md

md/raid1/10: fix potential deadlock

2017-03-26 12:13:19 +02:00

media

media: fix dm1105.c build error

2017-03-12 06:37:24 +01:00

memory

…

memstick

…

message

…

mfd

mfd: core: Fix device reference leak in mfd_clone_cell

2016-11-26 09:54:53 +01:00

misc

mei: bus: fix mei_cldev_enable KDoc

2017-01-12 11:22:47 +01:00

mmc

mmc: ushc: fix NULL-deref at probe

2017-03-30 09:35:17 +02:00

mtd

mtd: pmcmsp: use kstrndup instead of kmalloc+strncpy

2017-03-18 19:09:56 +08:00

net

net: bcmgenet: remove bcmgenet_internal_phy_setup()

2017-03-30 09:35:14 +02:00

nfc

mei: bus: fix received data size check in NFC fixup

2016-11-18 10:48:36 +01:00

ntb

ntb_transport: Pick an unused queue

2017-02-23 17:43:10 +01:00

nubus

…

nvdimm

nfit, libnvdimm: fix interleave set cookie calculation

2017-03-18 19:09:58 +08:00

nvme

…

nvmem

…

of

of: silence warnings due to max() usage

2016-11-15 07:46:39 +01:00

oprofile

…

parisc

…

parport

…

pci

PCI/ASPM: Handle PCI-to-PCIe bridges as roots of PCIe hierarchies

2017-02-09 08:02:44 +01:00

pcmcia

…

perf

…

phy

…

pinctrl

pinctrl: cherryview: Do not mask all interrupts in probe

2017-03-26 12:13:17 +02:00

platform

goldfish: Sanitize the broken interrupt handler

2017-02-26 11:07:51 +01:00

pnp

…

power

…

powercap

…

pps

…

ps3

…

ptp

…

pwm

pwm: pca9685: Fix period change with same duty cycle

2017-03-15 09:57:14 +08:00

rapidio

…

ras

…

regulator

regulator: Fix regulator_summary for deviceless consumers

2017-03-12 06:37:25 +01:00

remoteproc

…

reset

…

rpmsg

…

rtc

rtc: sun6i: Switch to the external oscillator

2017-03-12 06:37:30 +01:00

s390

s390/dcssblk: fix device size calculation in dcssblk_direct_access()

2017-03-15 09:57:12 +08:00

sbus

…

scsi

scsi: libiscsi: add lock around task lists to fix list corruption regression

2017-03-26 12:13:19 +02:00

sfi

…

sh

…

sn

…

soc

…

spi

spi: mvebu: fix baudrate calculation for armada variant

2017-01-15 13:41:36 +01:00

spmi

…

ssb

ssb: Fix error routine when fallback SPROM fails

2017-01-09 08:07:42 +01:00

staging

staging: rtl: fix possible NULL pointer dereference

2017-03-12 06:37:25 +01:00

target

target: Fix VERIFY_16 handling in sbc_parse_cdb

2017-03-26 12:13:19 +02:00

tc

…

thermal

thermal: hwmon: Properly report critical temperature in sysfs

2017-01-09 08:07:44 +01:00

thunderbolt

…

tty

serial: samsung: Continue to work if DMA request fails

2017-03-18 19:09:58 +08:00

uio

…

usb

usb: hub: Fix crash after failure to read BOS descriptor

2017-03-30 09:35:17 +02:00

uwb

uwb: hwa-rc: fix NULL-deref at probe

2017-03-30 09:35:17 +02:00

vfio

…

vhost

…

video

fbdev: color map copying bounds checking

2017-02-01 08:30:52 +01:00

virt

…

virtio

virtio_ring: Make interrupt suppression spec compliant

2016-11-10 16:36:34 +01:00

vlynq

…

vme

vme: Fix wrong pointer utilization in ca91cx42_slave_get

2017-01-19 20:17:21 +01:00

w1

w1: ds2490: USB transfer buffers need to be DMAable

2017-03-12 06:37:29 +01:00

watchdog

…

xen

xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing

2017-01-06 11:16:17 +01:00

zorro

…

Kconfig

…

Makefile

…