| commit | aeab631811cb795cc384a3c9bd3346767a0b3daf | [log] [tgz] |
|---|---|---|
| author | Jiri Kosina <jkosina@suse.cz> | Wed Aug 27 09:12:24 2014 +0200 |
| committer | chrmhoffmann <chrmhoffmann@gmail.com> | Sun Apr 05 10:20:39 2020 +0200 |
| tree | a9360dc0174aa98803cb47a83abd06176da33642 | |
| parent | 8d31c5d535aa4d71ee4f65f4c2fb5524393bcde0 [diff] |
HID: magicmouse: sanity check report size in raw_event() callback commit c54def7bd64d7c0b6993336abcffb8444795bf38 upstream. The report passed to us from transport driver could potentially be arbitrarily large, therefore we better sanity-check it so that magicmouse_emit_touch() gets only valid values of raw_id. Reported-by: Steven Vittitoe <scvitti@google.com> Signed-off-by: Jiri Kosina <jkosina@suse.cz> Signed-off-by: Zefan Li <lizefan@huawei.com>