tree 74726304cadd8e45583622006ae0bd28970c6eac
parent a53b710e74189499b0eac78734775f1899501efa
author Johan Hovold <johan@kernel.org> 1409133318 +0200
committer chrmhoffmann <chrmhoffmann@gmail.com> 1586074840 +0200

USB: serial: fix potential stack buffer overflow

commit d979e9f9ecab04c1ecca741370e30a8a498893f5 upstream.

Make sure to verify the maximum number of endpoints per type to avoid
writing beyond the end of a stack-allocated array.

The current usb-serial implementation is limited to eight ports per
interface but failed to verify that the number of endpoints of a certain
type reported by a device did not exceed this limit.

Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[lizf: Backported to 3.4: adjust context]
Signed-off-by: Zefan Li <lizefan@huawei.com>