Messages in this thread | | | Date | Wed, 11 Sep 2013 13:11:28 -0700 | Subject | Re: [PATCH v3 00/10] HID: validate report details | From | Kees Cook <> |
| |
On Wed, Sep 11, 2013 at 12:56 PM, Benjamin Tissoires <benjamin.tissoires@redhat.com> wrote: > Hi guys, > > here is the v3 of the CVE fixes. > > I have tested the multitouch and logitech-dj part, and the lenovo-tpkbd has been > tested in the bug referenced in patch 10. > > Cheers, > Benjamin > > Changes since v2: > - fix lenovo-tpkbd report validation > - fix lenovo-tpkbd not releasing the device when the report was not valid > - use generic tests found in previous hid-multitouch patches, so that this will > not happen again > - fix input_report index retrieving in hid-multitouch
Awesome! Thanks very much for fixing these up. I replied with Acks where appropriate. :)
-Kees
-- Kees Cook Chrome OS Security
| |