Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Grant Hernandez 754d0ca82f Input: gtco - bounds check collection indent level ... commit 2a017fd82c upstream. The GTCO tablet input driver configures itself from an HID report sent via USB during the initial enumeration process. Some debugging messages are generated during the parsing. A debugging message indentation counter is not bounds checked, leading to the ability for a specially crafted HID report to cause '-' and null bytes be written past the end of the indentation array. As long as the kernel has CONFIG_DYNAMIC_DEBUG enabled, this code will not be optimized out. This was discovered during code review after a previous syzkaller bug was found in this driver. Signed-off-by: Grant Hernandez <granthernandez@google.com> Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>		History 2019-08-13 12:39:25 +01:00
..
acecad.c	Input: delete non-required instances of include <linux/init.h>	2014-01-06 23:23:57 -08:00
aiptek.c	Input: aiptek - fix crash on detecting device without endpoints	2016-03-24 10:01:16 +00:00
gtco.c	Input: gtco - bounds check collection indent level	2019-08-13 12:39:25 +01:00
hanwang.c	Input: hanwang - validate number of endpoints before using them	2017-07-18 18:40:17 +01:00
kbtab.c	Input: kbtab - validate number of endpoints before using them	2017-07-18 18:40:17 +01:00
Kconfig	Merge branch 'next' into for-linus	2012-03-27 00:27:10 -07:00
Makefile	Input: add support for Hanwang tablets	2010-09-01 23:26:18 -07:00
wacom.h	Input: delete non-required instances of include <linux/init.h>	2014-01-06 23:23:57 -08:00
wacom_sys.c	Input: wacom - add support for three new ISDv4 sensors	2014-05-14 18:47:09 -07:00
wacom_wac.c	HID: wacom: Report ABS_MISC event for Cintiq Companion Hybrid	2015-03-03 14:40:05 +00:00
wacom_wac.h	Input: wacom - process outbound for newer Cintiqs	2014-05-29 00:09:16 -07:00