HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands

Browse source

commit 93a2001bdf upstream.

This patch validates the num_values parameter from userland during the
HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
leading to a heap overflow.

Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

...

This commit is contained in:

Scott Bauer 2016-06-23 08:59:47 -06:00 • committed by Greg Kroah-Hartman

parent 2d7a2ff18a

commit 300851ff55

1 changed files with 5 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

10

drivers/hid/usbhid/hiddev.c

View file