projects / sdk / emulator / emulator-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fa825f5) | patch
HID: picolcd: sanity check report size in raw_event() callback
authorJiri Kosina <jkosina@suse.cz>
Wed, 27 Aug 2014 07:13:15 +0000 (09:13 +0200)
committersungmin ha <sungmin82.ha@samsung.com>
Wed, 18 Mar 2015 07:52:18 +0000 (16:52 +0900)
commit39ea2cbf3750bf77824492864796832696c428ff
tree8e67124f9ecfff8b6a921b149f82d1cc11c06c3etree | snapshot
parentfa825f5c56e50d6a3e620ca183f7a9f6b95f680bcommit | diff
HID: picolcd: sanity check report size in raw_event() callback

The report passed to us from transport driver could potentially be
arbitrarily large, therefore we better sanity-check it so that raw_data
that we hold in picolcd_pending structure are always kept within proper
bounds.

Change-Id: I0511eac4664a417162f9d59a71d98e72f3cd381c
Cc: stable@vger.kernel.org
Reported-by: Steven Vittitoe <scvitti@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-picolcd_core.c diff | blob | history
Domain: SDK / Emulator;