tree 4f6341f923285f2e1428ec4992f5540a6ec4d482
parent a80e803a2ae4efa5efbcfa97dcbbc48d15226cf9
author Scott Bauer <sbauer@plzdonthack.me> 1466693987 -0600
committer Jiri Kosina <jkosina@suse.cz> 1466756499 +0200

HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands

This patch validates the num_values parameter from userland during the
HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
leading to a heap overflow.

Cc: stable@vger.kernel.org
Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>