android_kernel_oneplus_msm8998/drivers/media/usb
Johan Hovold f3ffc64bf3 cx231xx-cards: fix NULL-deref at probe
commit 0cd273bb5e4d1828efaaa8dfd11b7928131ed149 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Fixes: e0d3bafd02 ("V4L/DVB (10954): Add cx231xx USB driver")

Cc: Sri Deevi <Srinivasa.Deevi@conexant.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-05-25 14:30:14 +02:00
..
airspy media: fix airspy usb probe error path 2016-08-10 11:49:29 +02:00
as102 [media] as102: fix error return code 2015-05-01 07:00:51 -03:00
au0828 au0828: Fix dev_state handling 2016-04-20 15:42:09 +09:00
b2c2
cpia2
cx231xx cx231xx-cards: fix NULL-deref at probe 2017-05-25 14:30:14 +02:00
dvb-usb dib0700: fix NULL-deref at probe 2017-05-25 14:30:14 +02:00
dvb-usb-v2 dvb-usb-v2: avoid use-after-free 2017-04-21 09:30:07 +02:00
em28xx em28xx-i2c: rt_mutex_trylock() returns zero on failure 2016-10-07 15:23:44 +02:00
go7007 [media] media: videobuf2: Change queue_setup argument 2015-10-20 14:48:39 -02:00
gspca gspca: konica: add missing endpoint sanity check 2017-05-25 14:30:14 +02:00
hackrf [media] hackrf: move RF gain ctrl enable behind module parameter 2015-12-18 15:25:29 -02:00
hdpvr [media] hdpvr: embed video_device 2015-04-02 23:36:54 -03:00
msi2500 [media] media: videobuf2: Change queue_setup argument 2015-10-20 14:48:39 -02:00
pvrusb2 [media] v4l2: replace s_mbus_fmt by set_fmt in bridge drivers 2015-05-01 09:01:16 -03:00
pwc pwc: Add USB id for Philips Spc880nc webcam 2016-04-12 09:08:42 -07:00
s2255 [media] media: videobuf2: Change queue_setup argument 2015-10-20 14:48:39 -02:00
siano siano: make it work again with CONFIG_VMAP_STACK 2017-02-23 17:43:09 +01:00
stk1160 [media] media: videobuf2: Change queue_setup argument 2015-10-20 14:48:39 -02:00
stkwebcam [media] stk-webcam: Delete an unnecessary check before the function call "vfree" 2015-03-02 14:53:27 -03:00
tm6000 [media] cx25821, cx88, tm6000: use SNDRV_DEFAULT_ENABLE_PNP 2015-10-01 08:42:52 -03:00
ttusb-budget [media] dvb: Get rid of typedev usage for enums 2015-06-09 17:47:35 -03:00
ttusb-dec [media] dvb: get rid of enum dmx_success 2015-10-06 19:53:02 -03:00
usbtv media: usbtv: prevent access to free'd resources 2016-08-20 18:09:18 +02:00
usbvision usbvision: fix NULL-deref at probe 2017-05-25 14:30:12 +02:00
uvc uvcvideo: uvc_scan_fallback() for webcams with broken chain 2017-03-30 09:35:20 +02:00
zr364xx zr364xx: enforce minimum size when reading header 2017-05-25 14:30:14 +02:00
Kconfig [media] tlg2300: move to staging in preparation for removal 2014-12-16 23:21:43 -02:00
Makefile [media] tlg2300: move to staging in preparation for removal 2014-12-16 23:21:43 -02:00