USB: serial: io_ti: fix NULL-deref in interrupt callback
authorJohan Hovold <johan@kernel.org>
Mon, 6 Mar 2017 16:36:37 +0000 (17:36 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 18 Jul 2017 17:38:30 +0000 (18:38 +0100)
commit23b94d65c57ab09748e02935a20a6cdef34bb6be
treedf92d20c8ae97040a0b9cd54d1bc350a6a7ba1ea
parent4fb228ae24ec90d8dd5e030fa25effcac0664724
USB: serial: io_ti: fix NULL-deref in interrupt callback

commit 0b1d250afb8eb9d65afb568bac9b9f9253a82b49 upstream.

Fix a NULL-pointer dereference in the interrupt callback should a
malicious device send data containing a bad port number by adding the
missing sanity check.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Johan Hovold <johan@kernel.org>
[bwh: Backported to 3.2:
 - Use &urb->dev->dev instead of local dev variable
 - Adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/usb/serial/io_ti.c