Kalle Valo <kvalo@xxxxxxxxxxxxxx> writes: > Johan Hovold <johan@xxxxxxxxxx> writes: > >> On Mon, Mar 13, 2017 at 01:44:20PM +0100, Johan Hovold wrote: >>> Make sure to check the number of endpoints to avoid dereferencing a >>> NULL-pointer or accessing memory beyond the endpoint array should a >>> malicious device lack the expected endpoints. >>> >>> Fixes: 36bcce430657 ("ath9k_htc: Handle storage devices") >>> Cc: Sujith Manoharan <Sujith.Manoharan@xxxxxxxxxxx> >>> Signed-off-by: Johan Hovold <johan@xxxxxxxxxx> >> >> Is this one still in your queue, Kalle? > > Yes, I'm just lacking behing: > > https://patchwork.kernel.org/patch/9620723/ Meant "lagging" of course. Mondays.. >> As I mentioned earlier, I should have added a >> >> Cc: stable <stable@xxxxxxxxxxxxxxx> # 2.6.39 >> >> but left it out as I mistakingly thought the net recommendations to do >> so applied also to wireless. > > Ok, I'll add that. But is 2.6.39 really correct? Shouldn't it be 2.6.39+ so that it means all versions since 2.6.39? -- Kalle Valo-- To unsubscribe from this list: send the line "unsubscribe linux-usb" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html