Adrian Salido 8320caeeff HID: i2c-hid: allocate hid buffers for real worst case ... The buffer allocation is not currently accounting for an extra byte for the report id. This can cause an out of bounds access in function i2c_hid_set_or_send_report() with reportID > 15. Cc: stable@vger.kernel.org Signed-off-by: Adrian Salido <salidoa@google.com> Reviewed-by: Benson Leung <bleung@chromium.org> Signed-off-by: Guenter Roeck <groeck@chromium.org> Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Jiri Kosina <jkosina@suse.cz>		2017-09-13 18:16:40 +02:00
..
Kconfig	HID: i2c-hid: enhance Kconfig	2012-12-05 10:55:03 +01:00
Makefile	…
i2c-hid.c	HID: i2c-hid: allocate hid buffers for real worst case	2017-09-13 18:16:40 +02:00