diff options
| author | Rustam Kovhaev <[email protected]> | 2020-08-04 14:56:14 +0000 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2020-08-18 14:12:54 +0000 |
| commit | fea22e159d51c766ba70473f473a0ec914cc7e92 (patch) | |
| tree | f0bfe8d8da4a2b9a6528ae237f34cfbfc8ade45f /drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | |
| parent | staging: greybus: audio: Uninitialized variable in gbaudio_remove_controls() (diff) | |
| download | kernel-fea22e159d51c766ba70473f473a0ec914cc7e92.tar.gz kernel-fea22e159d51c766ba70473f473a0ec914cc7e92.zip | |
staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
let's use usb_find_common_endpoints() to discover endpoints, it does all
necessary checks for type and xfer direction
remove memset() in hfa384x_create(), because we now assign endpoints in
prism2sta_probe_usb() and because create_wlan() uses kzalloc() to
allocate hfa384x struct before calling hfa384x_create()
Fixes: faaff9765664 ("staging: wlan-ng: properly check endpoint types")
Reported-and-tested-by: [email protected]
Link: https://syzkaller.appspot.com/bug?extid=22794221ab96b0bab53a
Signed-off-by: Rustam Kovhaev <[email protected]>
Cc: stable <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c')
0 files changed, 0 insertions, 0 deletions