Re: [PATCH] usbvision fix overflow of interfaces array

An HTTP URL for the alternate patch mentioned: http://www.spinics.net/lists/linux-media/msg94831.html Best regards, Vladis Dronov | Red Hat, Inc. | Product Security Engineer -- To unsubscribe from this list: send the line "unsubscribe linux-media" in the body of a message to

Re: [PATCH] usbvision fix overflow of interfaces array

Hello, Oliver, all. Unfortunately, there are at least 4 different concerns about this patch: 1) "!dev->actconfig->interface[ifnum]" won't catch a case where the value is not NULL but some garbage. This way the system may crash with "general protection fault" later. I've hit this case during my

[PATCH] usbvision fix overflow of interfaces array

This fixes the crash reported in: http://seclists.org/bugtraq/2015/Oct/35 The interface number needs a sanity check. Signed-off-by: Oliver Neukum --- drivers/media/usb/usbvision/usbvision-video.c | 7 +++ 1 file changed, 7 insertions(+) diff --git