forked from luck/tmp_suning_uos_patched
4842ed5bfc
If we get an invalid device configuration from a palm 3 type device, we might incorrectly parse things, and we have the potential to crash in "interesting" ways. Fix this up by verifying the size of the configuration passed to us by the device, and only if it is correct, will we handle it. Note that this also fixes an information leak of slab data. Reported-by: Andrey Konovalov <andreyknvl@google.com> Reviewed-by: Andrey Konovalov <andreyknvl@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> [ johan: add comment about the info leak ] Cc: stable <stable@vger.kernel.org> Signed-off-by: Johan Hovold <johan@kernel.org> |
||
---|---|---|
.. | ||
aircable.c | ||
ark3116.c | ||
belkin_sa.c | ||
belkin_sa.h | ||
bus.c | ||
ch341.c | ||
console.c | ||
cp210x.c | ||
cyberjack.c | ||
cypress_m8.c | ||
cypress_m8.h | ||
digi_acceleport.c | ||
empeg.c | ||
ezusb_convert.pl | ||
f81232.c | ||
f81534.c | ||
ftdi_sio_ids.h | ||
ftdi_sio.c | ||
ftdi_sio.h | ||
garmin_gps.c | ||
generic.c | ||
io_16654.h | ||
io_edgeport.c | ||
io_edgeport.h | ||
io_ionsp.h | ||
io_ti.c | ||
io_ti.h | ||
io_usbvend.h | ||
ipaq.c | ||
ipw.c | ||
ir-usb.c | ||
iuu_phoenix.c | ||
iuu_phoenix.h | ||
Kconfig | ||
keyspan_pda.c | ||
keyspan_usa26msg.h | ||
keyspan_usa28msg.h | ||
keyspan_usa49msg.h | ||
keyspan_usa67msg.h | ||
keyspan_usa90msg.h | ||
keyspan.c | ||
kl5kusb105.c | ||
kl5kusb105.h | ||
kobil_sct.c | ||
kobil_sct.h | ||
Makefile | ||
Makefile-keyspan_pda_fw | ||
mct_u232.c | ||
mct_u232.h | ||
metro-usb.c | ||
mos7720.c | ||
mos7840.c | ||
mxuport.c | ||
navman.c | ||
omninet.c | ||
opticon.c | ||
option.c | ||
oti6858.c | ||
oti6858.h | ||
pl2303.c | ||
pl2303.h | ||
qcaux.c | ||
qcserial.c | ||
quatech2.c | ||
safe_serial.c | ||
sierra.c | ||
spcp8x5.c | ||
ssu100.c | ||
symbolserial.c | ||
ti_usb_3410_5052.c | ||
upd78f0730.c | ||
usb_debug.c | ||
usb_wwan.c | ||
usb-serial-simple.c | ||
usb-serial.c | ||
usb-wwan.h | ||
visor.c | ||
visor.h | ||
whiteheat.c | ||
whiteheat.h | ||
wishbone-serial.c | ||
xsens_mt.c |