zd1211rw: fix NULL-deref at probe
authorJohan Hovold <johan@kernel.org>
Mon, 13 Mar 2017 12:44:21 +0000 (13:44 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Sat, 26 Aug 2017 01:13:57 +0000 (02:13 +0100)
commit795ecd95898cb238f42d4ae35ecc1253f72ca0d4
tree5dc64a88a1f688895f211738d1ebe36ccf14dd83
parent135e5d48d5340a13dde43d38193fb58f661e8d47
zd1211rw: fix NULL-deref at probe

commit ca260ece6a57dc7d751e0685f51fa2c55d851873 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Fixes: a1030e92c150 ("[PATCH] zd1211rw: Convert installer CDROM device into WLAN device")
Cc: Daniel Drake <dsd@gentoo.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
[bwh: Backported to 3.2: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/net/wireless/zd1211rw/zd_usb.c