linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-25 12:00:22 +09:00

Files

Dmitry Torokhov 52f65e35c2 Input: gtco - fix potential out-of-bound access

commit a50829479f upstream.

parse_hid_report_descriptor() has a while (i < length) loop, which
only guarantees that there's at least 1 byte in the buffer, but the
loop body can read multiple bytes which causes out-of-bounds access.

Reported-by: Andrey Konovalov <andreyknvl@google.com>
Reviewed-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-11-02 09:49:14 +01:00

acecad.c

Input: acecad - stop saving struct usb_device

2016-03-31 13:13:39 -07:00

aiptek.c

Input: aiptek - stop saving struct usb_device

2016-03-31 13:13:40 -07:00

gtco.c

Input: gtco - fix potential out-of-bound access

2017-11-02 09:49:14 +01:00

hanwang.c

Input: hanwang - validate number of endpoints before using them