android_kernel_oneplus_msm8998/drivers/usb/musb
Heinrich Schuchardt e230078950 usb: musb: gadget: misplaced out of bounds check
commit af6f8529098aeb0e56a68671b450cf74e7a64fcd upstream.

musb->endpoints[] has array size MUSB_C_NUM_EPS.
We must check array bounds before accessing the array and not afterwards.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Signed-off-by: Bin Liu <b-liu@ti.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-04-24 09:32:05 +02:00
..
am35x.c
blackfin.c usb: musb: blackfin: add bfin_fifo_offset in bfin_ops 2017-01-12 11:22:47 +01:00
blackfin.h
cppi_dma.c
cppi_dma.h
da8xx.c usb: musb: da8xx: fix babble condition handling 2017-12-20 10:05:00 +01:00
davinci.c
davinci.h
jz4740.c
Kconfig usb: musb: USB_TI_CPPI41_DMA requires dmaengine support 2015-11-18 15:09:26 -06:00
Makefile
musb_am335x.c
musb_core.c usb: musb: Check for host-mode using is_host_active() on reset interrupt 2017-10-27 10:23:16 +02:00
musb_core.h usb: musb: core: add clear_ep_rxintr() to musb_platform_ops 2017-01-12 11:22:43 +01:00
musb_cppi41.c usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer 2017-03-30 09:35:17 +02:00
musb_debug.h
musb_debugfs.c
musb_dma.h
musb_dsps.c usb: musb: dsps: implement clear_ep_rxintr() callback 2017-01-12 11:22:43 +01:00
musb_gadget.c
musb_gadget.h
musb_gadget_ep0.c usb: musb: gadget: misplaced out of bounds check 2018-04-24 09:32:05 +02:00
musb_host.c usb: musb: fix tx fifo flush handling again 2017-08-16 13:40:29 -07:00
musb_host.h
musb_io.h
musb_regs.h
musb_virthub.c
musbhsdma.c
musbhsdma.h usb: musb: Fix trying to free already-free IRQ 4 2017-01-12 11:22:47 +01:00
omap2430.c usb: musb: omap2430: Fix regression caused by driver core change 2015-10-28 10:16:04 -07:00
omap2430.h
sunxi.c usb: musb: sunxi: Explicitly release USB PHY on exit 2017-10-27 10:23:16 +02:00
tusb6010.c
tusb6010.h
tusb6010_omap.c usb: musb: tusb6010_omap: Do not reset the other direction's packet size 2017-05-25 14:30:12 +02:00
ux500.c usb: musb: ux500: Fix NULL pointer dereference at system PM 2018-01-17 09:35:28 +01:00
ux500_dma.c usb: musb/ux500: remove duplicate check for dma_is_compatible 2018-02-25 11:03:45 +01:00