tree 75158340ea5667258f51a754a2e028a33dd92904
parent a18908edd5d012e5bba60da58de3d94691a4ca4d
author Marc Zyngier <maz@kernel.org> 1598700361 +0100
committer Luca Weiss <luca.weiss@fairphone.com> 1626347891 +0200

HID: core: Correctly handle ReportSize being zero

commit bce1305c0ece3dc549663605e567655dd701752c upstream.

It appears that a ReportSize value of zero is legal, even if a bit
non-sensical. Most of the HID code seems to handle that gracefully,
except when computing the total size in bytes. When fed as input to
memset, this leads to some funky outcomes.

Detect the corner case and correctly compute the size.

Cc: stable@vger.kernel.org
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

(cherry picked from commit cf7797ea60e3e721e3ae5090edbc2ec72d715436)