linux-uconsole/drivers/input/tablet
Dmitry Torokhov 2c99438cf6 Input: gtco - fix potential out-of-bound access
commit a50829479f upstream.

parse_hid_report_descriptor() has a while (i < length) loop, which
only guarantees that there's at least 1 byte in the buffer, but the
loop body can read multiple bytes which causes out-of-bounds access.

Reported-by: Andrey Konovalov <andreyknvl@google.com>
Reviewed-by: Andrey Konovalov <andreyknvl@google.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-11-02 09:40:49 +01:00
..
acecad.c Input: delete non-required instances of include <linux/init.h> 2014-01-06 23:23:57 -08:00
aiptek.c Input: aiptek - fix crash on detecting device without endpoints 2015-12-02 09:35:41 -08:00
gtco.c Input: gtco - fix potential out-of-bound access 2017-11-02 09:40:49 +01:00
hanwang.c Input: hanwang - validate number of endpoints before using them 2017-03-30 09:35:15 +02:00
kbtab.c Input: kbtab - validate number of endpoints before using them 2017-03-30 09:35:15 +02:00
Kconfig Merge branch 'wacom' into next 2014-08-06 23:31:48 -07:00
Makefile Merge branch 'wacom' into next 2014-08-06 23:31:48 -07:00
wacom_serial4.c Input: wacom_serial4 - prepare for wacom USB moving to HID 2014-07-25 18:26:06 -07:00