]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aee8d5f) | patch
HID: debug: check length before copy_to_user()
authorDaniel Rosenberg <drosen@google.com>
Mon, 2 Jul 2018 23:59:37 +0000 (16:59 -0700)
committerJiri Kosina <jkosina@suse.cz>
Tue, 3 Jul 2018 09:54:40 +0000 (11:54 +0200)
commit99a98ef2cf5e6a5043db4401b24efd144089f665
tree909cbc9aaa97298c6110292cfc06a883174fc611tree | snapshot
parentaee8d5f4ccfa8dfb03a70ff30e06ac58eff38ef8commit | diff
HID: debug: check length before copy_to_user()

If our length is greater than the size of the buffer, we
overflow the buffer

Cc: stable@vger.kernel.org
Signed-off-by: Daniel Rosenberg <drosen@google.com>
Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-debug.c diff | blob | history
Linux Kernel Source Tree.