Johan Hovold 6e526fdff7 net: wimax/i2400m: fix NULL-deref at probe
Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

The endpoints are specifically dereferenced in the i2400m_bootrom_init
path during probe (e.g. in i2400mu_tx_bulk_out).

Fixes: f398e4240fce ("i2400m/USB: probe/disconnect, dev init/shutdown
and reset backends")
Cc: Inaky Perez-Gonzalez <inaky@linux.intel.com>

Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-03-13 12:28:40 -07:00
..
2017-03-03 21:36:56 -08:00
2017-03-03 21:36:56 -08:00
2017-02-23 15:57:04 -08:00
2017-03-03 16:15:48 -08:00
2017-03-04 11:26:18 -08:00
2017-02-20 16:42:43 -08:00
2017-02-23 15:57:04 -08:00
2017-02-21 11:51:42 -08:00
2017-02-22 19:23:14 -08:00
2017-03-03 16:44:21 -08:00
2017-02-23 11:53:22 -08:00
2017-03-01 09:46:02 -08:00
2017-02-20 17:23:57 -08:00
2017-02-23 15:57:04 -08:00
2017-03-02 13:53:13 -08:00
2017-03-03 21:36:56 -08:00
2017-02-23 11:53:22 -08:00