linux/drivers/input/tablet
Dmitry Torokhov a50829479f Input: gtco - fix potential out-of-bound access
parse_hid_report_descriptor() has a while (i < length) loop, which
only guarantees that there's at least 1 byte in the buffer, but the
loop body can read multiple bytes which causes out-of-bounds access.

Reported-by: Andrey Konovalov <andreyknvl@google.com>
Reviewed-by: Andrey Konovalov <andreyknvl@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
2017-10-27 15:14:41 -07:00
..
acecad.c Input: acecad - constify usb_device_idi and fix space before '[' error 2017-08-07 20:10:20 -07:00
aiptek.c Input: aiptek - constify attribute_group structures 2017-07-12 14:18:24 -07:00
gtco.c Input: gtco - fix potential out-of-bound access 2017-10-27 15:14:41 -07:00
hanwang.c Input: hanwang - validate number of endpoints before using them 2017-03-16 13:56:52 -07:00
kbtab.c Input: kbtab - constify usb_device_id 2017-08-07 20:10:21 -07:00
Kconfig Input: add Pegasus Notetaker tablet driver 2016-06-02 10:00:17 -07:00
Makefile Input: add Pegasus Notetaker tablet driver 2016-06-02 10:00:17 -07:00
pegasus_notetaker.c Input: pegasus_notetaker - directly include workqueue header 2016-08-25 10:11:32 -07:00
wacom_serial4.c Input: wacom_serial4 - constify serio_device_id 2017-08-18 17:15:09 -07:00