]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8c5a510) | patch
HID: i2c-hid: fix ret_count check
authorJiri Kosina <jkosina@suse.cz>
Thu, 6 Dec 2012 09:59:28 +0000 (10:59 +0100)
committerJiri Kosina <jkosina@suse.cz>
Thu, 6 Dec 2012 09:59:28 +0000 (10:59 +0100)
commit63f544c84ca95584dd6a4271f8ea3c1454b11029
tree9ba2f25c20b765b0e47ea824534e8a29ee1a4c6ftree | snapshot
parent8c5a510b5dd790b860d403ddfbb3c6980d46150dcommit | diff
HID: i2c-hid: fix ret_count check

ret_count has to be at least 3, as we have to count the 2 bytes that are used
for the size of the reply. Without this, memcpy() might be called with zero or
negative count.

Reported-by: Jean Delvare <khali@linux-fr.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/i2c-hid/i2c-hid.c diff | blob | history
Linux Kernel Source Tree.