Input: uinput - fix undefined behavior in uinput_validate_absinfo()
authorDmitry Torokhov <dmitry.torokhov@gmail.com>
Mon, 14 Jan 2019 21:54:55 +0000 (13:54 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 31 Jan 2019 07:14:37 +0000 (08:14 +0100)
commit92fbac528fd0727eddf60476d73869383602fab0
treeacb18050937666b54a9eaba70a01c6baaf468265
parent71b1af87749b917a2b6fd4afa0b8a9019f1259a4
Input: uinput - fix undefined behavior in uinput_validate_absinfo()

commit d77651a227f8920dd7ec179b84e400cce844eeb3 upstream.

An integer overflow may arise in uinput_validate_absinfo() if "max - min"
can't be represented by an "int". We should check for overflow before
trying to use the result.

Reported-by: Kyungtae Kim <kt0755@gmail.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/input/misc/uinput.c