HID: i2c-hid: fix ret_count check
authorJiri Kosina <jkosina@suse.cz>
Thu, 6 Dec 2012 09:59:28 +0000 (10:59 +0100)
committerJiri Kosina <jkosina@suse.cz>
Thu, 6 Dec 2012 09:59:28 +0000 (10:59 +0100)
commit9afd09a1db93cc9084846c2b9bc0d1194743e5dc
tree9ba2f25c20b765b0e47ea824534e8a29ee1a4c6f
parente5b50fe7bea43d0658773c89ba410ecc56867ee6
HID: i2c-hid: fix ret_count check

ret_count has to be at least 3, as we have to count the 2 bytes that are used
for the size of the reply. Without this, memcpy() might be called with zero or
negative count.

Reported-by: Jean Delvare <khali@linux-fr.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/i2c-hid/i2c-hid.c