HID: magicmouse: sanity check report size in raw_event() callback
authorJiri Kosina <jkosina@suse.cz>
Wed, 27 Aug 2014 07:12:24 +0000 (09:12 +0200)
committerJiri Kosina <jkosina@suse.cz>
Wed, 27 Aug 2014 07:14:39 +0000 (09:14 +0200)
commitc54def7bd64d7c0b6993336abcffb8444795bf38
treeed1c5fdea443dfd8c85138dfa9d534028efe30c0
parent5abfe85c1d4694d5d4bbd13ecc166262b937adf0
HID: magicmouse: sanity check report size in raw_event() callback

The report passed to us from transport driver could potentially be
arbitrarily large, therefore we better sanity-check it so that
magicmouse_emit_touch() gets only valid values of raw_id.

Cc: stable@vger.kernel.org
Reported-by: Steven Vittitoe <scvitti@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-magicmouse.c