diff options
author | Szymon Heidrich <szymon.heidrich@gmail.com> | 2022-01-24 12:14:00 +0100 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-02-16 12:44:52 +0100 |
commit | c7ad83d561df15ac6043d3b0d783aee777cf1731 (patch) | |
tree | 4ed99beb77a9dea5cdfdc19df5938193dfaf1606 /lib/flex_array.c | |
parent | 0d18cda400d506e01c9c8108447c6ceddc0288f7 (diff) |
USB: gadget: validate interface OS descriptor requests
commit 75e5b4849b81e19e9efe1654b30d7f3151c33c2c upstream.
Stall the control endpoint in case provided index exceeds array size of
MAX_CONFIG_INTERFACES or when the retrieved function pointer is null.
Signed-off-by: Szymon Heidrich <szymon.heidrich@gmail.com>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'lib/flex_array.c')
0 files changed, 0 insertions, 0 deletions