USB: usb_driver_claim_interface: add sanity checking
authorOliver Neukum <oneukum@suse.com>
Wed, 16 Mar 2016 12:26:17 +0000 (13:26 +0100)
committerBen Hutchings <ben@decadent.org.uk>
Sat, 30 Apr 2016 22:05:19 +0000 (00:05 +0200)
commit79a575e829ba789c462c103c54fd9554f60079db
treeab110933c9022b304193704e9ceec414ae8b1ec3
parente0dbd4b2f2a1bbb1485eb26c5dedf540db9f2d59
USB: usb_driver_claim_interface: add sanity checking

commit 0b818e3956fc1ad976bee791eadcbb3b5fec5bfd upstream.

Attacks that trick drivers into passing a NULL pointer
to usb_driver_claim_interface() using forged descriptors are
known. This thwarts them by sanity checking.

Signed-off-by: Oliver Neukum <ONeukum@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
drivers/usb/core/driver.c