Messages in this thread | | | Date | Wed, 17 Dec 2014 08:53:00 +0100 (CET) | From | Jiri Kosina <> | Subject | Re: [PATCH v2 1/3] HID: logitech-dj: check report length |
| |
On Tue, 16 Dec 2014, Peter Wu wrote:
> Malicious USB devices can send bogus reports smaller than the expected > buffer size. Ensure that the length is valid to avoid reading out of > bounds. > > Signed-off-by: Peter Wu <peter@lekensteyn.nl> > --- > v1: patch 2/3 HID: logitech-{dj,hidpp}: check report length > v2: splitted original report length check patch
Applied to for-3.19/upstream-fixes.
-- Jiri Kosina SUSE Labs
| |