Messages in this thread | | | Date | Wed, 17 Dec 2014 08:53:11 +0100 (CET) | From | Jiri Kosina <> | Subject | Re: [PATCH v2 2/3] HID: logitech-hidpp: check WTP report length |
| |
On Tue, 16 Dec 2014, Peter Wu wrote:
> Malicious USB devices can send bogus reports smaller than the expected > buffer size. Ensure that the length for WTP reports is valid to avoid > reading out of bounds. > > Signed-off-by: Peter Wu <peter@lekensteyn.nl> > --- > v1: patch 2/3 HID: logitech-{dj,hidpp}: check report length > v2: splitted original report length check patch
Applied to for-3.19/upstream-fixes.
Thanks,
-- Jiri Kosina SUSE Labs
| |