android_kernel_sony_sdm845/drivers/usb/usbip
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Colin Ian King b7661e9af8 usbip: vudc: fix null pointer dereference on udc->lock
commit df3334c223a033f562645712e832ca4cbb326bbf upstream.

Currently the driver attempts to spin lock on udc->lock before a NULL
pointer check is performed on udc, hence there is a potential null
pointer dereference on udc->lock.  Fix this by moving the null check
on udc before the lock occurs.

Fixes: ea6873a45a ("usbip: vudc: Add SysFS infrastructure for VUDC")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Shuah Khan <shuahkh@osg.samsung.com>
Reviewed-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-03-18 11:18:55 +01:00
..
Kconfig usb: Kconfig: using select for USB_COMMON dependency 2016-09-27 12:20:17 +02:00
Makefile usbip: vudc: Add vudc to Kconfig 2016-04-26 15:19:50 -07:00
README
stub.h usbip: fix NULL pointer dereference on errors 2016-04-28 12:28:08 -07:00
stub_dev.c usbip: keep usbip_device sockfd state in sync with tcp_socket 2018-02-25 11:05:45 +01:00
stub_main.c usbip: stub: stop printing kernel pointer addresses in messages 2018-01-02 20:35:15 +01:00
stub_rx.c usbip: stub: stop printing kernel pointer addresses in messages 2018-01-02 20:35:15 +01:00
stub_tx.c usbip: stub: stop printing kernel pointer addresses in messages 2018-01-02 20:35:15 +01:00
usbip_common.c usbip: remove kernel addresses from usb device and urb debug msgs 2018-01-17 09:38:55 +01:00
usbip_common.h usbip: prevent vhci_hcd driver from leaking a socket pointer address 2018-01-31 12:55:50 +01:00
usbip_event.c usbip: event handler as one thread 2016-04-19 04:33:15 +09:00
vhci.h usbip: vhci extension: modifications to vhci driver 2016-08-09 16:21:05 +02:00
vhci_hcd.c usbip: keep usbip_device sockfd state in sync with tcp_socket 2018-02-25 11:05:45 +01:00
vhci_rx.c usbip: vhci: stop printing kernel pointer addresses in messages 2018-01-02 20:35:15 +01:00
vhci_sysfs.c usbip: prevent vhci_hcd driver from leaking a socket pointer address 2018-01-31 12:55:50 +01:00
vhci_tx.c usbip: vhci: stop printing kernel pointer addresses in messages 2018-01-02 20:35:15 +01:00
vudc.h usb: usbip: vudc: Rename find_endpoint() to vudc_find_endpoint() 2016-04-28 12:28:08 -07:00
vudc_dev.c usbip: vudc: Fix apparent cut-n-paste error 2016-08-30 19:06:43 +02:00
vudc_main.c usbip: vudc: Add VUDC main file 2016-04-26 15:19:50 -07:00
vudc_rx.c usbip: fix vudc_rx: harden CMD_SUBMIT path to handle malicious input 2018-01-17 09:38:56 +01:00
vudc_sysfs.c usbip: vudc: fix null pointer dereference on udc->lock 2018-03-18 11:18:55 +01:00
vudc_transfer.c usbip: vudc: fix: Clear already_seen flag also for ep0 2017-01-06 10:40:11 +01:00
vudc_tx.c usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer buffer 2018-01-17 09:38:56 +01:00

TODO:
	- more discussion about the protocol
	- testing
	- review of the userspace interface
	- document the protocol

Please send patches for this code to Greg Kroah-Hartman <greg@kroah.com>