diff options
| author | Pietro Borrello <borrello@diag.uniroma1.it> | 2023-01-11 21:12:16 +0300 |
|---|---|---|
| committer | Jiri Kosina <jkosina@suse.cz> | 2023-01-18 18:34:35 +0300 |
| commit | 3782c0d6edf658b71354a64d60aa7a296188fc90 (patch) | |
| tree | 1e75cc5e855e4f234f4c9d5b93e6f24cdde00c4d /fs | |
| parent | ccf1e1626d37745d0a697db67407beec9ae9d4b8 (diff) | |
| download | linux-3782c0d6edf658b71354a64d60aa7a296188fc90.tar.xz | |
HID: betop: check shape of output reports
betopff_init() only checks the total sum of the report counts for each
report field to be at least 4, but hid_betopff_play() expects 4 report
fields.
A device advertising an output report with one field and 4 report counts
would pass the check but crash the kernel with a NULL pointer dereference
in hid_betopff_play().
Fixes: 52cd7785f3cd ("HID: betop: add drivers/hid/hid-betopff.c")
Signed-off-by: Pietro Borrello <borrello@diag.uniroma1.it>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Diffstat (limited to 'fs')
0 files changed, 0 insertions, 0 deletions