Qiujun Huang dc8b6e55fa USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback ... commit 57aa9f294b09463492f604feaa5cc719beaace32 upstream. Fix slab-out-of-bounds read in the interrupt-URB completion handler. The boundary condition should be (length - 1) as we access data[position + 1]. Reported-and-tested-by: syzbot+37ba33391ad5f3935bbd@syzkaller.appspotmail.com Signed-off-by: Qiujun Huang <hqjagain@gmail.com> Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Cc: stable <stable@vger.kernel.org> Signed-off-by: Johan Hovold <johan@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-04-07 14:24:43 +02:00
..
aircable.c
ark3116.c
belkin_sa.c
belkin_sa.h
bus.c
ch341.c	USB: serial: ch341: handle unbound port at reset_resume	2020-04-07 13:37:37 +02:00
console.c
cp210x.c	usb-serial: cp201x: support Mark-10 digital force gauge	2020-04-07 12:37:35 +02:00
cyberjack.c
cypress_m8.c	USB: serial: cypress_m8: fix interrupt-out transfer length	2020-04-07 12:32:39 +02:00
cypress_m8.h
digi_acceleport.c
empeg.c
ezusb_convert.pl
f81232.c
ftdi_sio_ids.h	USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P	2020-04-07 12:43:18 +02:00
ftdi_sio.c	USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P	2020-04-07 12:43:18 +02:00
ftdi_sio.h
garmin_gps.c
generic.c
io_16654.h
io_edgeport.c	USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback	2020-04-07 14:24:43 +02:00
io_edgeport.h
io_ionsp.h
io_tables.h
io_ti.c
io_ti.h
io_usbvend.h
ipaq.c
ipw.c
ir-usb.c	USB: serial: ir-usb: fix IrLAP framing	2020-04-07 13:45:29 +02:00
iuu_phoenix.c
iuu_phoenix.h
Kconfig
keyspan_pda.c
keyspan_usa26msg.h
keyspan_usa28msg.h
keyspan_usa49msg.h
keyspan_usa67msg.h
keyspan_usa90msg.h
keyspan.c	USB: serial: keyspan: handle unbound ports	2020-04-07 13:37:59 +02:00
keyspan.h
kl5kusb105.c
kl5kusb105.h
kobil_sct.c
kobil_sct.h
Makefile
Makefile-keyspan_pda_fw
mct_u232.c
mct_u232.h
metro-usb.c
mos7720.c	USB: serial: mos7720: fix remote wakeup	2020-04-07 12:37:40 +02:00
mos7840.c	USB: serial: mos7840: fix remote wakeup	2020-04-07 12:37:42 +02:00
mxuport.c
navman.c
omninet.c
opticon.c	USB: serial: opticon: fix control-message timeouts	2020-04-07 13:37:33 +02:00
option.c	USB: serial: option: add Wistron Neweb D19Q1	2020-04-07 14:24:39 +02:00
oti6858.c
oti6858.h
pl2303.c	USB: serial: pl2303: add device-id for HP LD381	2020-04-07 14:14:09 +02:00
pl2303.h	USB: serial: pl2303: add device-id for HP LD381	2020-04-07 14:14:09 +02:00
qcaux.c
qcserial.c
quatech2.c	USB: serial: quatech2: handle unbound ports	2020-04-07 13:37:41 +02:00
safe_serial.c
sierra.c
spcp8x5.c
ssu100.c
symbolserial.c
ti_usb_3410_5052.c	USB: serial: ti_usb_3410_5052: fix port-close races	2020-04-07 09:26:32 +02:00
ti_usb_3410_5052.h
usb_debug.c
usb_wwan.c	USB: serial: option: add ZLP support for 0x1bc7/0x9010	2020-04-07 13:32:44 +02:00
usb-serial-simple.c	USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx	2020-04-07 13:37:31 +02:00
usb-serial.c	USB: serial: suppress driver bind attributes	2020-04-07 13:37:35 +02:00
usb-wwan.h	USB: serial: option: add ZLP support for 0x1bc7/0x9010	2020-04-07 13:32:44 +02:00
visor.c
visor.h
whiteheat.c	USB: serial: whiteheat: fix line-speed endianness	2020-04-07 09:28:18 +02:00
whiteheat.h	USB: serial: whiteheat: fix line-speed endianness	2020-04-07 09:28:18 +02:00
wishbone-serial.c
xsens_mt.c