Input: ims-psu - check if CDC union descriptor is sane
authorDmitry Torokhov <dmitry.torokhov@gmail.com>
Sat, 7 Oct 2017 18:07:47 +0000 (11:07 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 18 Nov 2017 10:22:24 +0000 (11:22 +0100)
commit9d65d0ea55dcb813cea7df05602f233ad4843baf
tree6ac0dd8341b1eac9641200e2aecb27cc6f641591
parent8cf061d919e2102d0de0379bafea6cce1405d786
Input: ims-psu - check if CDC union descriptor is sane

commit ea04efee7635c9120d015dcdeeeb6988130cb67a upstream.

Before trying to use CDC union descriptor, try to validate whether that it
is sane by checking that intf->altsetting->extra is big enough and that
descriptor bLength is not too big and not too small.

Reported-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Cc: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/input/misc/ims-pcu.c