| commit | a50829479f58416a013a4ccca791336af3c584c7 | [log] [tgz] |
|---|---|---|
| author | Dmitry Torokhov <dmitry.torokhov@gmail.com> | Mon Oct 23 16:46:00 2017 -0700 |
| committer | Dmitry Torokhov <dmitry.torokhov@gmail.com> | Fri Oct 27 15:14:41 2017 -0700 |
| tree | 74da0be0913dcd747df260a8432f2d8d8c708607 | |
| parent | 57a95b41869b8f0d1949c24df2a9dac1ca7082ee [diff] |
Input: gtco - fix potential out-of-bound access parse_hid_report_descriptor() has a while (i < length) loop, which only guarantees that there's at least 1 byte in the buffer, but the loop body can read multiple bytes which causes out-of-bounds access. Reported-by: Andrey Konovalov <andreyknvl@google.com> Reviewed-by: Andrey Konovalov <andreyknvl@google.com> Cc: stable@vger.kernel.org Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>