Johan Hovold 2338de43e2 cx231xx-cards: fix NULL-deref at probe ...

commit 0cd273bb5e upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Fixes: e0d3bafd02 ("V4L/DVB (10954): Add cx231xx USB driver")

Cc: Sri Deevi <Srinivasa.Deevi@conexant.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-05-25 15:44:42 +02:00

..

common

…

dvb-core

…

dvb-frontends

dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops

2017-05-25 15:44:42 +02:00

firewire

…

i2c

s5k4ecgx: select CRC32 helper

2017-02-01 08:33:12 +01:00

mmc

…

pci

media: fix dm1105.c build error

2017-03-12 06:41:41 +01:00

platform

s5p-mfc: Fix unbalanced call to clock management

2017-05-25 15:44:41 +02:00

radio

…

rc

mceusb: fix NULL-deref at probe

2017-05-25 15:44:39 +02:00

spi

gs1662: drop kfree for memory allocated with devm_kzalloc

2017-01-26 08:24:45 +01:00

tuners

…

usb

cx231xx-cards: fix NULL-deref at probe

2017-05-25 15:44:42 +02:00

v4l2-core

…

cec-edid.c

…

Kconfig

…

Makefile

…

media-device.c

media: Properly pass through media entity types in entity enumeration

2017-03-12 06:41:41 +01:00

media-devnode.c

…

media-entity.c

…