HID: logitech-hidpp: check WTP report length
authorPeter Wu <peter@lekensteyn.nl>
Tue, 16 Dec 2014 15:55:22 +0000 (16:55 +0100)
committerJiri Kosina <jkosina@suse.cz>
Wed, 17 Dec 2014 07:51:52 +0000 (08:51 +0100)
commit0b3f6569a560aa68c9c50cae0e1bc401f7ee699f
treee3372f9fe5bcf4f4d30db907e74501d194162941
parentf254ae938ea479739572790a4e9b0ca86d16249f
HID: logitech-hidpp: check WTP report length

Malicious USB devices can send bogus reports smaller than the expected
buffer size. Ensure that the length for WTP reports is valid to avoid
reading out of bounds.

Signed-off-by: Peter Wu <peter@lekensteyn.nl>
Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-logitech-hidpp.c