From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Subject: usb: usbfs: fix crash in check_ctrlrecip()->usb_find_alt_setting()
From: Vladis Dronov <vdronov@redhat.com>
Message-Id: <20180925122242.10950-1-vdronov@redhat.com>
Date: Tue, 25 Sep 2018 14:22:42 +0200
To: Greg Kroah-Hartman <gregkh@linuxfoundation.org>, Alan Stern <stern@rowland.harvard.edu>, Oliver Neukum <oneukum@suse.com>, Hans de Goede <hdegoede@redhat.com>, syzkaller@googlegroups.com, linux-usb@vger.kernel.org, linux-kernel@vger.kernel.org
Cc: stable <stable@vger.kernel.org>, Vladis Dronov <vdronov@redhat.com>
List-ID: <linux-usb.vger.kernel.org>

cHMtPmRldi0+YWN0Y29uZmlnIGNhbiBiZSBOVUxMIGFuZCBjYXVzZSBOVUxMLWRlcmVmIGluIHVz
Yl9maW5kX2FsdF9zZXR0aW5nKCkKYmVmb3JlIGM5YTRjYjIwNGU5ZS4gZml4IHRoaXMgYW55d2F5
IGJ5IGNoZWNraW5nIHRoYXQgcHMtPmRldi0+YWN0Y29uZmlnIGlzIG5vdApOVUxMLCBzbyB1c2Jf
ZmluZF9hbHRfc2V0dGluZygpIGlzIG5vdCBjYWxsZWQgd2l0aCBhIGtub3duLWJhZCBhcmd1bWVu
dC4KClNpZ25lZC1vZmYtYnk6IFZsYWRpcyBEcm9ub3YgPHZkcm9ub3ZAcmVkaGF0LmNvbT4KUmVw
b3J0ZWQtYnk6IHN5emJvdCsxOWMzYWFlZjg1YTg5ZDQ1MWVhY0BzeXprYWxsZXIuYXBwc3BvdG1h
aWwuY29tCi0tLQogZHJpdmVycy91c2IvY29yZS9kZXZpby5jIHwgMiArLQogMSBmaWxlIGNoYW5n
ZWQsIDEgaW5zZXJ0aW9uKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0tZ2l0IGEvZHJpdmVycy91
c2IvY29yZS9kZXZpby5jIGIvZHJpdmVycy91c2IvY29yZS9kZXZpby5jCmluZGV4IDZjZTc3YjMz
ZGE2MS4uMjYwNDc2MjBiMDAzIDEwMDY0NAotLS0gYS9kcml2ZXJzL3VzYi9jb3JlL2RldmlvLmMK
KysrIGIvZHJpdmVycy91c2IvY29yZS9kZXZpby5jCkBAIC04MjQsNyArODI0LDcgQEAgc3RhdGlj
IGludCBjaGVja19jdHJscmVjaXAoc3RydWN0IHVzYl9kZXZfc3RhdGUgKnBzLCB1bnNpZ25lZCBp
bnQgcmVxdWVzdHR5cGUsCiAJICogY2xhc3Mgc3BlY2lmaWNhdGlvbiwgd2hpY2ggd2UgYWx3YXlz
IHdhbnQgdG8gYWxsb3cgYXMgaXQgaXMgdXNlZAogCSAqIHRvIHF1ZXJ5IHRoaW5ncyBsaWtlIGlu
ayBsZXZlbCwgZXRjLgogCSAqLwotCWlmIChyZXF1ZXN0dHlwZSA9PSAweGExICYmIHJlcXVlc3Qg
PT0gMCkgeworCWlmIChyZXF1ZXN0dHlwZSA9PSAweGExICYmIHJlcXVlc3QgPT0gMCAmJiBwcy0+
ZGV2LT5hY3Rjb25maWcpIHsKIAkJYWx0X3NldHRpbmcgPSB1c2JfZmluZF9hbHRfc2V0dGluZyhw
cy0+ZGV2LT5hY3Rjb25maWcsCiAJCQkJCQkgICBpbmRleCA+PiA4LCBpbmRleCAmIDB4ZmYpOwog
CQlpZiAoYWx0X3NldHRpbmcK