| commit | 11677bd1cc851c9dda154095f62d93b2c34afc9c | [log] [tgz] |
|---|---|---|
| author | Jiri Kosina <jkosina@suse.cz> | Wed Aug 27 09:12:24 2014 +0200 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Sun Oct 05 14:54:08 2014 -0700 |
| tree | 83bd3228d2485a5842eec806feecff1bc7d1ed3f | |
| parent | 8ee6be5563a5bdb9a5df5f88f8bbbab8930fe6da [diff] |
HID: magicmouse: sanity check report size in raw_event() callback commit c54def7bd64d7c0b6993336abcffb8444795bf38 upstream. The report passed to us from transport driver could potentially be arbitrarily large, therefore we better sanity-check it so that magicmouse_emit_touch() gets only valid values of raw_id. Reported-by: Steven Vittitoe <scvitti@google.com> Signed-off-by: Jiri Kosina <jkosina@suse.cz> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>