tree a9360dc0174aa98803cb47a83abd06176da33642
parent 8d31c5d535aa4d71ee4f65f4c2fb5524393bcde0
author Jiri Kosina <jkosina@suse.cz> 1409123544 +0200
committer chrmhoffmann <chrmhoffmann@gmail.com> 1586074839 +0200

HID: magicmouse: sanity check report size in raw_event() callback

commit c54def7bd64d7c0b6993336abcffb8444795bf38 upstream.

The report passed to us from transport driver could potentially be
arbitrarily large, therefore we better sanity-check it so that
magicmouse_emit_touch() gets only valid values of raw_id.

Reported-by: Steven Vittitoe <scvitti@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Zefan Li <lizefan@huawei.com>