Badhri Jagan Sridharan 258a8f519a UPSTREAM: Input: powermate - fix oops with malicious USB descriptors ...

The powermate driver expects at least one valid USB endpoint in its
probe function.  If given malicious descriptors that specify 0 for
the number of endpoints, it will crash.  Validate the number of
endpoints on the interface before using them.

The full report for this issue can be found here:
http://seclists.org/bugtraq/2016/Mar/85

BUG: 28242610

Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Badhri Jagan Sridharan <Badhri@google.com>
Change-Id: I1cb956a35f3bba73324240d5bd0a029f49d3c456

2016-08-30 13:41:35 -07:00

..

gameport

x86/asm/tsc: Rename native_read_tsc() to rdtsc()

2015-07-06 15:23:28 +02:00

joystick

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2015-12-19 09:51:11 -08:00

keyboard

Input: snvs_pwrkey - remove duplicated semicolon

2015-10-26 17:28:34 -07:00

misc

UPSTREAM: Input: powermate - fix oops with malicious USB descriptors

2016-08-30 13:41:35 -07:00

mouse

Input: elan_i2c - set input device's vendor and product IDs

2015-12-15 11:35:55 -08:00

serio

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2015-12-19 09:51:11 -08:00

tablet

Input: aiptek - fix crash on detecting device without endpoints

2015-12-02 09:35:41 -08:00

touchscreen

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2015-12-19 09:51:11 -08:00

apm-power.c

Input: random formatting fixes

2012-08-21 22:29:49 -07:00

evbug.c

Input: use pr_fmt and pr_<level>

2010-11-30 23:10:26 -08:00

evdev.c

Input: evdev - fix bug in checking duplicate clock change request

2015-10-31 10:35:02 -07:00

ff-core.c

Input: document and check on implicitly defined FF_MAX_EFFECTS

2015-10-16 15:32:16 -07:00

ff-memless.c

[media] fixp-arith: replace sin/cos table by a better precision one

2015-03-02 14:50:06 -03:00

input-compat.c

compat: Use COMPAT_USE_64BIT_TIME in the input subsystem

2012-02-20 12:48:47 -08:00

input-compat.h

compat: Use COMPAT_USE_64BIT_TIME in the input subsystem

2012-02-20 12:48:47 -08:00

input-leds.c

Input: LEDs - skip unnamed LEDs

2015-07-24 09:11:01 -07:00

input-mt.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2015-04-14 18:25:15 -07:00

input-polldev.c

Input: implement managed polled input devices

2014-05-14 16:40:04 -07:00

input.c

Input: improve autorepeat initialization

2015-10-13 23:30:31 -07:00

joydev.c

Input: joydev - fix possible ERR_PTR() dereferencing

2015-10-06 16:38:40 -07:00

Kconfig

android: skip building drivers as modules

2016-02-16 13:54:25 -08:00

keycombo.c

input: add keycombo, a general key combo driver.

2016-02-16 13:50:58 -08:00

keyreset.c

input: Made keyreset more robust

2016-02-16 13:50:58 -08:00

Makefile

input: add keycombo, a general key combo driver.

2016-02-16 13:50:58 -08:00

matrix-keymap.c

input: Export matrix_keypad_parse_of_params()

2013-04-19 00:31:13 +02:00

mousedev.c

Input: mousedev - fix race when creating mixed device

2014-03-29 14:44:23 -07:00

sparse-keymap.c

treewide: Fix typo in Documentation/DocBook

2014-02-19 14:58:17 +01:00