linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-03-10 22:29:52 -04:00

Files

Dmitry Torokhov a50829479f Input: gtco - fix potential out-of-bound access

parse_hid_report_descriptor() has a while (i < length) loop, which
only guarantees that there's at least 1 byte in the buffer, but the
loop body can read multiple bytes which causes out-of-bounds access.

Reported-by: Andrey Konovalov <andreyknvl@google.com>
Reviewed-by: Andrey Konovalov <andreyknvl@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>

2017-10-27 15:14:41 -07:00

acecad.c

Input: acecad - constify usb_device_idi and fix space before '[' error

2017-08-07 20:10:20 -07:00

aiptek.c

Input: aiptek - constify attribute_group structures

2017-07-12 14:18:24 -07:00

gtco.c

Input: gtco - fix potential out-of-bound access

2017-10-27 15:14:41 -07:00

hanwang.c

Input: hanwang - validate number of endpoints before using them