HID: rmi: check report length before trimming sentinel bytes

Browse source

rmi_check_sanity() trims trailing 0xff sentinel bytes, but its loop
reads data[valid_size - 1] before checking that valid_size is non-zero.

Reverse the condition so the length is proved before the last byte is
inspected.

Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Signed-off-by: Jiri Kosina <jkosina@suse.com>

...

This commit is contained in:

Pengpeng Hou 2026-06-30 14:52:45 +08:00 • committed by Jiri Kosina

parent 08d8814521

commit 28a3e326fa

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/hid/hid-rmi.c

View file