| commit | f5dbee6e3881b1dbfdcc36008d48bd29549ab2f4 | [log] [tgz] |
|---|---|---|
| author | Sean Young <sean@mess.org> | Sat Jul 28 05:11:15 2018 -0400 |
| committer | Mauro Carvalho Chehab <mchehab+samsung@kernel.org> | Mon Jul 30 08:19:53 2018 -0400 |
| tree | 0c40f47cfe5fd713d664009851b11b0439f094ad | |
| parent | 92cab799bbc6fa1fca84bd1692285a5f926c17e9 [diff] |
media: rc: read out of bounds if bpf reports high protocol number The repeat period is read from a static array. If a keydown event is reported from bpf with a high protocol number, we read out of bounds. This is unlikely to end up with a reasonable repeat period at the best of times, in which case no timely key up event is generated. Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>