lkml.org 
[lkml]   [2023]   [Feb]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: [PATCH] hid: bigben_probe(): validate report count
Date

On Sun, 12 Feb 2023 00:01:44 +0000, Pietro Borrello wrote:
> bigben_probe() does not validate that the output report has the
> needed report values in the first field.
> A malicious device registering a report with one field and a single
> value causes an head OOB write in bigben_worker() when
> accessing report_field->value[1] to report_field->value[7].
> Use hid_validate_values() which takes care of all the needed checks.
>
> [...]

Applied, thanks!

[1/1] hid: bigben_probe(): validate report count
commit: b94335f899542a0da5fafc38af8edcaf90195843

Best regards,
--
Benjamin Tissoires <benjamin.tissoires@redhat.com>

\
 
 \ /
  Last update: 2023-03-27 00:25    [W:0.049 / U:0.048 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site