| commit | 9afd09a1db93cc9084846c2b9bc0d1194743e5dc | [log] [tgz] |
|---|---|---|
| author | Jiri Kosina <jkosina@suse.cz> | Thu Dec 06 10:59:28 2012 +0100 |
| committer | Jiri Kosina <jkosina@suse.cz> | Thu Dec 06 10:59:28 2012 +0100 |
| tree | 9ba2f25c20b765b0e47ea824534e8a29ee1a4c6f | |
| parent | e5b50fe7bea43d0658773c89ba410ecc56867ee6 [diff] |
HID: i2c-hid: fix ret_count check ret_count has to be at least 3, as we have to count the 2 bytes that are used for the size of the reply. Without this, memcpy() might be called with zero or negative count. Reported-by: Jean Delvare <khali@linux-fr.org> Signed-off-by: Jiri Kosina <jkosina@suse.cz>