Commit cb1b4946 authored Mar 16, 2017 by Johan Hovold Committed by Dmitry Torokhov Mar 16, 2017

Input: kbtab - validate number of endpoints before using them



Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Signed-off-by: Johan Hovold <johan@kernel.org>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>

parent ba340d7b

drivers/input/tablet/kbtab.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -122,6 +122,9 @@ static int kbtab_probe(struct usb_interface intf, const struct usb_device_id i
		struct input_dev *input_dev;
		int error = -ENOMEM;

		if (intf->cur_altsetting->desc.bNumEndpoints < 1)
		return -ENODEV;

		kbtab = kzalloc(sizeof(struct kbtab), GFP_KERNEL);
		input_dev = input_allocate_device();
		if (!kbtab \|\| !input_dev)

Admin message