diff options
| author | Jia-Ju Bai <baijiaju1990@gmail.com> | 2019-05-22 13:33:58 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-05-22 14:25:37 +0200 |
| commit | 5bce256f0b528624a34fe907db385133bb7be33e (patch) | |
| tree | cbfcd8ee20b9e720cc4f8a1a752e3b106ae5a065 /drivers/usb/usbip/vudc_main.c | |
| parent | xhci: update bounce buffer with correct sg num (diff) | |
| download | linux-5bce256f0b528624a34fe907db385133bb7be33e.tar.xz linux-5bce256f0b528624a34fe907db385133bb7be33e.zip | |
usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint()
In xhci_debugfs_create_slot(), kzalloc() can fail and
dev->debugfs_private will be NULL.
In xhci_debugfs_create_endpoint(), dev->debugfs_private is used without
any null-pointer check, and can cause a null pointer dereference.
To fix this bug, a null-pointer check is added in
xhci_debugfs_create_endpoint().
This bug is found by a runtime fuzzing tool named FIZZER written by us.
[subjet line change change, add potential -Mathais]
Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/usbip/vudc_main.c')
0 files changed, 0 insertions, 0 deletions