kernel-fxtec-pro1x/drivers/usb/serial
Qiujun Huang a0dbf15833 USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
commit 57aa9f294b09463492f604feaa5cc719beaace32 upstream.

Fix slab-out-of-bounds read in the interrupt-URB completion handler.

The boundary condition should be (length - 1) as we access
data[position + 1].

Reported-and-tested-by: syzbot+37ba33391ad5f3935bbd@syzkaller.appspotmail.com
Signed-off-by: Qiujun Huang <hqjagain@gmail.com>
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-02 15:28:20 +02:00
..
aircable.c
ark3116.c
belkin_sa.c
belkin_sa.h
bus.c
ch341.c USB: serial: ch341: handle unbound port at reset_resume 2020-01-23 08:21:27 +01:00
console.c
cp210x.c usb-serial: cp201x: support Mark-10 digital force gauge 2019-12-01 09:17:41 +01:00
cyberjack.c
cypress_m8.c USB: serial: cypress_m8: fix interrupt-out transfer length 2019-11-24 08:20:16 +01:00
cypress_m8.h
digi_acceleport.c
empeg.c
ezusb_convert.pl
f81232.c
f81534.c USB: serial: f81534: fix reading old/new IC config 2019-12-13 08:51:29 +01:00
ftdi_sio.c USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P 2019-12-05 09:21:26 +01:00
ftdi_sio.h
ftdi_sio_ids.h USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P 2019-12-05 09:21:26 +01:00
garmin_gps.c
generic.c
io_16654.h
io_edgeport.c USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback 2020-04-02 15:28:20 +02:00
io_edgeport.h
io_ionsp.h
io_ti.c
io_ti.h
io_usbvend.h
ipaq.c
ipw.c
ir-usb.c USB: serial: ir-usb: fix IrLAP framing 2020-02-01 09:37:02 +00:00
iuu_phoenix.c
iuu_phoenix.h
Kconfig
keyspan.c USB: serial: keyspan: handle unbound ports 2020-01-23 08:21:28 +01:00
keyspan_pda.c
keyspan_usa26msg.h
keyspan_usa28msg.h
keyspan_usa49msg.h
keyspan_usa67msg.h
keyspan_usa90msg.h
kl5kusb105.c
kl5kusb105.h
kobil_sct.c
kobil_sct.h
Makefile
Makefile-keyspan_pda_fw
mct_u232.c
mct_u232.h
metro-usb.c
mos7720.c USB: serial: mos7720: fix remote wakeup 2019-12-01 09:17:43 +01:00
mos7840.c USB: serial: mos7840: fix remote wakeup 2019-12-01 09:17:43 +01:00
mxuport.c
navman.c
omninet.c
opticon.c USB: serial: opticon: fix control-message timeouts 2020-01-23 08:21:27 +01:00
option.c USB: serial: option: add Wistron Neweb D19Q1 2020-04-02 15:28:20 +02:00
oti6858.c
oti6858.h
pl2303.c USB: serial: pl2303: add device-id for HP LD381 2020-03-25 08:06:09 +01:00
pl2303.h USB: serial: pl2303: add device-id for HP LD381 2020-03-25 08:06:09 +01:00
qcaux.c
qcserial.c
quatech2.c USB: serial: quatech2: handle unbound ports 2020-01-23 08:21:28 +01:00
safe_serial.c
sierra.c
spcp8x5.c
ssu100.c
symbolserial.c
ti_usb_3410_5052.c USB: serial: ti_usb_3410_5052: fix port-close races 2019-10-29 09:19:46 +01:00
upd78f0730.c
usb-serial-simple.c USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx 2020-01-23 08:21:27 +01:00
usb-serial.c USB: serial: suppress driver bind attributes 2020-01-23 08:21:27 +01:00
usb-wwan.h USB: serial: option: add ZLP support for 0x1bc7/0x9010 2020-01-14 20:07:04 +01:00
usb_debug.c
usb_wwan.c USB: serial: option: add ZLP support for 0x1bc7/0x9010 2020-01-14 20:07:04 +01:00
visor.c
visor.h
whiteheat.c USB: serial: whiteheat: fix line-speed endianness 2019-11-06 13:06:18 +01:00
whiteheat.h USB: serial: whiteheat: fix line-speed endianness 2019-11-06 13:06:18 +01:00
wishbone-serial.c
xsens_mt.c