linux/drivers/input/tablet
Dmitry Torokhov 52f65e35c2 Input: gtco - fix potential out-of-bound access
commit a50829479f upstream.

parse_hid_report_descriptor() has a while (i < length) loop, which
only guarantees that there's at least 1 byte in the buffer, but the
loop body can read multiple bytes which causes out-of-bounds access.

Reported-by: Andrey Konovalov <andreyknvl@google.com>
Reviewed-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2017-11-02 09:49:14 +01:00
..
acecad.c Input: acecad - stop saving struct usb_device 2016-03-31 13:13:39 -07:00
aiptek.c Input: aiptek - stop saving struct usb_device 2016-03-31 13:13:40 -07:00
gtco.c Input: gtco - fix potential out-of-bound access 2017-11-02 09:49:14 +01:00
hanwang.c Input: hanwang - validate number of endpoints before using them 2017-03-30 09:41:23 +02:00
kbtab.c Input: kbtab - validate number of endpoints before using them 2017-03-30 09:41:23 +02:00
Kconfig Input: add Pegasus Notetaker tablet driver 2016-06-02 10:00:17 -07:00
Makefile Input: add Pegasus Notetaker tablet driver 2016-06-02 10:00:17 -07:00
pegasus_notetaker.c Input: pegasus_notetaker - directly include workqueue header 2016-08-25 10:11:32 -07:00
wacom_serial4.c Input: wacom_serial4 - prepare for wacom USB moving to HID 2014-07-25 18:26:06 -07:00