Input: iforce - add sanity checks

The endpoint type should also be checked before a device
is accepted.

Reported-by: syzbot+5efc10c005014d061a74@syzkaller.appspotmail.com
Signed-off-by: Oliver Neukum <oneukum@suse.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>

1 files changed, 5 insertions, 0 deletions

diff --git a/drivers/input/joystick/iforce/iforce-usb.c b/drivers/input/joystick/iforce/iforce-usb.c
index 29abfeeef9a5..6c554c11a7ac 100644
--- a/drivers/input/joystick/iforce/iforce-usb.c
+++ b/drivers/input/joystick/iforce/iforce-usb.c
@@ -201,7 +201,12 @@ static int iforce_usb_probe(struct usb_interface *intf,
                 return -ENODEV;
 
         epirq = &interface->endpoint[0].desc;
+        if (!usb_endpoint_is_int_in(epirq))
+                return -ENODEV;
+
         epout = &interface->endpoint[1].desc;
+        if (!usb_endpoint_is_int_out(epout))
+                return -ENODEV;
 
         iforce_usb = kzalloc(sizeof(*iforce_usb), GFP_KERNEL);
         if (!iforce_usb)