]> git.baikalelectronics.ru Git - kernel.git/commit
HID: magicmouse: sanity check report size in raw_event() callback
authorJiri Kosina <jkosina@suse.cz>
Wed, 27 Aug 2014 07:12:24 +0000 (09:12 +0200)
committerJiri Kosina <jkosina@suse.cz>
Wed, 27 Aug 2014 07:14:39 +0000 (09:14 +0200)
commite1a88fb1e2a06583ff39a4e34b2003e2fd9d5557
treeed1c5fdea443dfd8c85138dfa9d534028efe30c0
parent99f94576a2a137c71fc2cdb0aea25cbe458b542e
HID: magicmouse: sanity check report size in raw_event() callback

The report passed to us from transport driver could potentially be
arbitrarily large, therefore we better sanity-check it so that
magicmouse_emit_touch() gets only valid values of raw_id.

Cc: stable@vger.kernel.org
Reported-by: Steven Vittitoe <scvitti@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-magicmouse.c