linux/drivers/net
Johan Hovold a495fd19cc hso: fix NULL-deref on tty open
[ Upstream commit 8353da9fa6 ]

Fix NULL-pointer dereference on tty open due to a failure to handle a
missing interrupt-in endpoint when probing modem ports:

	BUG: kernel NULL pointer dereference, address: 0000000000000006
	...
	RIP: 0010:tiocmget_submit_urb+0x1c/0xe0 [hso]
	...
	Call Trace:
	hso_start_serial_device+0xdc/0x140 [hso]
	hso_serial_open+0x118/0x1b0 [hso]
	tty_open+0xf1/0x490

Fixes: 542f548236 ("tty: Modem functions for the HSO driver")
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-10-07 18:57:20 +02:00
..
appletalk
arcnet arcnet: provide a buffer big enough to actually receive packets 2019-10-05 13:09:26 +02:00
bonding bonding: Force slave speed check after link state recovery for 802.3ad 2019-08-29 08:28:28 +02:00
caif caif-hsi: fix possible deadlock in cfhsi_exit_module() 2019-07-28 08:29:23 +02:00
can can: peak_usb: force the string buffer NULL-terminated 2019-08-29 08:28:38 +02:00
dsa net: dsa: mv88e6xxx: wait after reset deactivation 2019-07-28 08:29:24 +02:00
ethernet cxgb4:Fix out-of-bounds MSI-X info array access 2019-10-07 18:57:19 +02:00
fddi
fjes
hamradio
hippi
hyperv hv_netvsc: Fix a warning of suspicious RCU usage 2019-09-10 10:33:43 +01:00
ieee802154 ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails 2019-09-21 07:16:47 +02:00
ipvlan net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set 2019-06-25 11:35:58 +08:00
netdevsim
phy net/phy: fix DP83865 10 Mbps HDX loopback disable function 2019-10-05 13:09:27 +02:00
plip
ppp ppp: Fix memory leak in ppp_write 2019-10-05 13:09:29 +02:00
slip slip: make slhc_free() silently accept an error pointer 2019-05-02 09:58:56 +02:00
team team: Add vlan tx offload to hw_enc_features 2019-08-25 10:48:04 +02:00
usb hso: fix NULL-deref on tty open 2019-10-07 18:57:20 +02:00
vmxnet3
wan
wimax wimax/i2400m: fix a memory leak bug 2019-09-10 10:33:48 +01:00
wireless iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 2019-10-05 13:09:59 +02:00
xen-netback xen/netback: Reset nr_frags before freeing skb 2019-08-25 10:48:05 +02:00
dummy.c
eql.c
geneve.c
gtp.c gtp: fix use-after-free in gtp_newlink() 2019-07-26 09:14:17 +02:00
ifb.c
Kconfig gtp: change NET_UDP_TUNNEL dependency to select 2019-04-03 06:26:15 +02:00
LICENSE.SRC
loopback.c
macsec.c macsec: drop skb sk before calling gro_cells_receive 2019-10-05 13:09:27 +02:00
macvlan.c
macvtap.c
Makefile net: Always descend into dsa/ 2019-05-25 18:23:19 +02:00
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c
thunderbolt.c net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending 2019-06-15 11:54:07 +02:00
tun.c tun: fix use-after-free when register netdev failed 2019-09-19 09:09:33 +02:00
veth.c
virtio_net.c
vrf.c vrf: make sure skb->data contains ip header to make routing 2019-07-28 08:29:26 +02:00
vsockmon.c
vxlan.c vxlan: Don't call gro_cells_destroy() before device is unregistered 2019-04-03 06:26:18 +02:00
xen-netfront.c xen-netfront: do not assume sk_buff_head list is empty in error handling 2019-09-21 07:16:43 +02:00