projects / GitHub / MotorolaMobilityLLC / kernel-slsi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a80e803) | patch
HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
authorScott Bauer <sbauer@plzdonthack.me>
Thu, 23 Jun 2016 14:59:47 +0000 (08:59 -0600)
committerJiri Kosina <jkosina@suse.cz>
Fri, 24 Jun 2016 08:21:39 +0000 (10:21 +0200)
commit93a2001bdfd5376c3dc2158653034c20392d15c5
tree4f6341f923285f2e1428ec4992f5540a6ec4d482tree | snapshot (tar.gz zip)
parenta80e803a2ae4efa5efbcfa97dcbbc48d15226cf9commit | diff
HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands

This patch validates the num_values parameter from userland during the
HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
leading to a heap overflow.

Cc: stable@vger.kernel.org
Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/usbhid/hiddev.c diff | blob | blame | history
Motorola kernel-slsi