Input: uinput - fix undefined behavior in uinput_validate_absinfo()
authorDmitry Torokhov <dmitry.torokhov@gmail.com>
Mon, 14 Jan 2019 21:54:55 +0000 (13:54 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 31 Jan 2019 07:13:45 +0000 (08:13 +0100)
commit28edadd147bfed92e3e16ed519ef098276935d94
treed448506d529220fa029628399c3599b05193ded4
parentd8c3df0641bcf9eb4e8ad4048fdf9ea575c79928
Input: uinput - fix undefined behavior in uinput_validate_absinfo()

commit d77651a227f8920dd7ec179b84e400cce844eeb3 upstream.

An integer overflow may arise in uinput_validate_absinfo() if "max - min"
can't be represented by an "int". We should check for overflow before
trying to use the result.

Reported-by: Kyungtae Kim <kt0755@gmail.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/input/misc/uinput.c