diff options
| author | Oliver Neukum <oneukum@suse.de> | 2007-08-21 01:10:42 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2007-08-22 17:27:58 -0400 |
| commit | 85237f202d46d55c1bffe0c5b1aa3ddc0f1dce4d (patch) | |
| tree | 261871504ea83df81488ac36e567e36de08c9b7a /drivers/media/video/pwc/pwc.h | |
| parent | c39772d82ad453647ea4bf9d793010d86ef5e597 (diff) | |
USB: fix DoS in pwc USB video driver
the pwc driver has a disconnect method that waits for user space to
close the device. This opens up an opportunity for a DoS attack,
blocking the USB subsystem and making khubd's task busy wait in
kernel space. This patch shifts freeing resources to close if an opened
device is disconnected.
Signed-off-by: Oliver Neukum <oneukum@suse.de>
CC: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/media/video/pwc/pwc.h')
| -rw-r--r-- | drivers/media/video/pwc/pwc.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/media/video/pwc/pwc.h b/drivers/media/video/pwc/pwc.h index 910a04f53920..8e8e5b27e77e 100644 --- a/drivers/media/video/pwc/pwc.h +++ b/drivers/media/video/pwc/pwc.h | |||
| @@ -193,6 +193,7 @@ struct pwc_device | |||
| 193 | char vsnapshot; /* snapshot mode */ | 193 | char vsnapshot; /* snapshot mode */ |
| 194 | char vsync; /* used by isoc handler */ | 194 | char vsync; /* used by isoc handler */ |
| 195 | char vmirror; /* for ToUCaM series */ | 195 | char vmirror; /* for ToUCaM series */ |
| 196 | char unplugged; | ||
| 196 | 197 | ||
| 197 | int cmd_len; | 198 | int cmd_len; |
| 198 | unsigned char cmd_buf[13]; | 199 | unsigned char cmd_buf[13]; |