Messages in this thread | | | From | Bjørn Mork <> | Subject | Re: [PATCH] USB: s2255 & stkwebcam: fix oops with malicious USB descriptors | Date | Fri, 12 Apr 2019 11:07:05 +0200 |
| |
Yang Xiao <92siuyang@gmail.com> writes:
> If given malicious descritors that spcify 0 for the number of endpoints, > then there is a null pointer deference when calling function > usb_endpoint_is_bulk_in. > > for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
Try this:
#include <stdio.h> int main() { int i; for (i=0; i<0; ++i) printf("%d\n"); return 0; }
How many lines did it print?
Bjørn
| |