xiaomi-sm8450/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
24cc679abbf31477d0cc6106ec83c2fbae6b3cdf
android_kernel_xiaomi_sm8450/drivers/input
History
Tetsuo Handa 24cc679abb Input: iforce - invert valid length check when fetching device IDs 
commit b8ebf250997c5fb253582f42bfe98673801ebebd upstream.

syzbot is reporting uninitialized value at iforce_init_device() [1], for
commit 6ac0aec6b0 ("Input: iforce - allow callers supply data buffer
when fetching device IDs") is checking that valid length is shorter than
bytes to read. Since iforce_get_id_packet() stores valid length when
returning 0, the caller needs to check that valid length is longer than or
equals to bytes to read.

Reported-by: syzbot <syzbot+4dd880c1184280378821@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fixes: 6ac0aec6b0 ("Input: iforce - allow callers supply data buffer when fetching device IDs")
Link: https://lore.kernel.org/r/531fb432-7396-ad37-ecba-3e42e7f56d5c@I-love.SAKURA.ne.jp
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-11-25 17:45:52 +01:00
..
gameport
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
joystick
Input: iforce - invert valid length check when fetching device IDs
2022-11-25 17:45:52 +01:00
keyboard
Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
2022-10-05 10:38:38 +02:00
misc
Input: rk805-pwrkey - fix module autoloading
2022-09-08 11:11:38 +02:00
mouse
Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
2022-06-14 18:32:46 +02:00
rmi4
Input: synaptics-rmi4 - support bootloader v8 in f34v7
2020-10-04 19:51:45 -07:00
serio
Input: gscps2 - check return value of ioremap() in gscps2_probe()
2022-08-21 15:16:15 +02:00
tablet
Input: aiptek - properly check endpoint type
2022-03-23 09:13:29 +01:00
touchscreen
Input: melfas_mip4 - fix return value check in mip4_probe()
2022-10-05 10:38:41 +02:00
apm-power.c
…
evbug.c
…
evdev.c
Input: evdev - per-client waitgroups
2020-10-06 18:34:15 -07:00
ff-core.c
…
ff-memless.c
Input: ff-memless - kill timer in destroy()
2019-11-15 11:45:03 -08:00
input-compat.c
…
input-compat.h
…
input-leds.c
…
input-mt.c
Input: MT - avoid comma separated statements
2020-08-25 10:26:05 -07:00
input-polldev.c
…
input-poller.c
Input: add input_get_poll_interval()
2019-10-04 12:31:46 -07:00
input-poller.h
Input: add support for polling to input devices
2019-08-20 12:04:07 -07:00
input.c
Input: add bounds checking to input_set_capability()
2022-05-25 09:17:52 +02:00
joydev.c
Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
2021-07-14 16:55:39 +02:00
Kconfig
…
Makefile
Input: add support for polling to input devices
2019-08-20 12:04:07 -07:00
matrix-keymap.c
Input: matrix-keymap - switch to use device_property_count_u32()
2019-08-12 00:03:13 -07:00
mousedev.c
*: convert stream-like files -> stream_open, even if they use noop_llseek
2019-07-14 16:09:19 +03:00
sparse-keymap.c
Input: Use fallthrough pseudo-keyword
2020-07-07 11:25:54 -07:00