linux/drivers/hid/hid-magicmouse.c
Jiri Kosina 249b61a6ba HID: magicmouse: sanity check report size in raw_event() callback
commit c54def7bd6 upstream.

The report passed to us from transport driver could potentially be
arbitrarily large, therefore we better sanity-check it so that
magicmouse_emit_touch() gets only valid values of raw_id.

Reported-by: Steven Vittitoe <scvitti@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2014-10-05 13:40:54 -07:00

583 lines
17 KiB