Jiri Kosina 844817e47e HID: picolcd: sanity check report size in raw_event() callback ...

The report passed to us from transport driver could potentially be
arbitrarily large, therefore we better sanity-check it so that raw_data
that we hold in picolcd_pending structure are always kept within proper
bounds.

Cc: stable@vger.kernel.org
Reported-by: Steven Vittitoe <scvitti@google.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

2014-08-27 09:14:39 +02:00

19 KiB

Raw Blame History

View Raw