Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Dmitry Torokhov 9d399eba10 Input: gtco - fix potential out-of-bound access ... commit a50829479f upstream. parse_hid_report_descriptor() has a while (i < length) loop, which only guarantees that there's at least 1 byte in the buffer, but the loop body can read multiple bytes which causes out-of-bounds access. Reported-by: Andrey Konovalov <andreyknvl@google.com> Reviewed-by: Andrey Konovalov <andreyknvl@google.com> Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		History 2017-11-26 13:50:39 +00:00
..
acecad.c	Input: delete non-required instances of include <linux/init.h>	2014-01-06 23:23:57 -08:00
aiptek.c	Input: aiptek - fix crash on detecting device without endpoints	2016-03-24 10:01:16 +00:00
gtco.c	Input: gtco - fix potential out-of-bound access	2017-11-26 13:50:39 +00:00
hanwang.c	Input: hanwang - validate number of endpoints before using them	2017-07-18 18:40:17 +01:00
kbtab.c	Input: kbtab - validate number of endpoints before using them	2017-07-18 18:40:17 +01:00
Kconfig	Merge branch 'next' into for-linus	2012-03-27 00:27:10 -07:00
Makefile	Input: add support for Hanwang tablets	2010-09-01 23:26:18 -07:00
wacom.h	Input: delete non-required instances of include <linux/init.h>	2014-01-06 23:23:57 -08:00
wacom_sys.c	Input: wacom - add support for three new ISDv4 sensors	2014-05-14 18:47:09 -07:00
wacom_wac.c	HID: wacom: Report ABS_MISC event for Cintiq Companion Hybrid	2015-03-03 14:40:05 +00:00
wacom_wac.h	Input: wacom - process outbound for newer Cintiqs	2014-05-29 00:09:16 -07:00