Commit a8be8005 authored by Oliver Neukum's avatar Oliver Neukum Committed by Mauro Carvalho Chehab
Browse files

media: ati_remote: sanity check for both endpoints 



If you do sanity checks, you should do them for both endpoints.
Hence introduce checking for endpoint type for the output
endpoint, too.

Reported-by: default avatar <syzbot+998261c2ae5932458f6c@syzkaller.appspotmail.com>
Signed-off-by: default avatarOliver Neukum <oneukum@suse.com>
Signed-off-by: default avatarSean Young <sean@mess.org>
Signed-off-by: default avatarMauro Carvalho Chehab <mchehab+huawei@kernel.org>
parent ce5d72b6

drivers/media/rc/ati_remote.c

+4 −0
Original line number Diff line number Diff line
@@ -835,6 +835,10 @@ static int ati_remote_probe(struct usb_interface *interface, 
		err("%s: endpoint_in message size==0? \n", __func__);

		return -ENODEV;

	}

	if (!usb_endpoint_is_int_out(endpoint_out)) {

		err("%s: Unexpected endpoint_out\n", __func__);

		return -ENODEV;

	}



	ati_remote = kzalloc(sizeof (struct ati_remote), GFP_KERNEL);

	rc_dev = rc_allocate_device(RC_DRIVER_SCANCODE);