On Thu, Mar 17, 2016 at 11:07:31AM +0100, Oliver Neukum wrote:
> An attack using missing endpoints exists.
> CVE-2016-3137
>
> Signed-off-by: Oliver Neukum <ONeukum@xxxxxxxx>
> CC: stable@xxxxxxxxxxxxxxx
> ---
> drivers/usb/serial/cypress_m8.c | 12 ++++++------
> 1 file changed, 6 insertions(+), 6 deletions(-)
>
> diff --git a/drivers/usb/serial/cypress_m8.c b/drivers/usb/serial/cypress_m8.c
> index 01bf533..8eeff72 100644
> --- a/drivers/usb/serial/cypress_m8.c
> +++ b/drivers/usb/serial/cypress_m8.c
> @@ -447,6 +447,12 @@ static int cypress_generic_port_probe(struct usb_serial_port *port)
> struct usb_serial *serial = port->serial;
> struct cypress_private *priv;
>
> + if (!port->interrupt_out_urb || !port->interrupt_in_urb) {
> + dev_err(&port->dev,
> + "cypress_m8 is missing a required endpoint");
Trailing '\n' missing.
No need to include the driver name here, it will be added by dev_err.
Also please include a patch revision in the summary when resending (and
a changelog below the cut-off line).
Thanks,
Johan
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html