linux-stable/drivers/input
Grant Hernandez 2628fa1a6d Input: gtco - bounds check collection indent level
commit 2a017fd82c upstream.

The GTCO tablet input driver configures itself from an HID report sent
via USB during the initial enumeration process. Some debugging messages
are generated during the parsing. A debugging message indentation
counter is not bounds checked, leading to the ability for a specially
crafted HID report to cause '-' and null bytes be written past the end
of the indentation array. As long as the kernel has CONFIG_DYNAMIC_DEBUG
enabled, this code will not be optimized out.  This was discovered
during code review after a previous syzkaller bug was found in this
driver.

Signed-off-by: Grant Hernandez <granthernandez@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-08-04 09:33:26 +02:00
..
gameport
joystick Input: xpad - add support for SteelSeries Stratus Duo 2019-01-31 08:12:35 +01:00
keyboard Input: imx_keypad - make sure keyboard can always wake up system 2019-07-21 09:05:54 +02:00
misc Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD 2019-07-10 09:55:28 +02:00
mouse Input: elantech - enable middle button support on 2 ThinkPads 2019-07-21 09:05:50 +02:00
rmi4 Input: synaptics-rmi4 - fix possible double free 2019-05-16 19:43:44 +02:00
serio Input: i8042 - add Lenovo LaVie Z to the i8042 reset list 2018-08-03 07:55:11 +02:00
tablet Input: gtco - bounds check collection indent level 2019-08-04 09:33:26 +02:00
touchscreen input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) 2018-09-26 08:36:39 +02:00
apm-power.c
evbug.c
evdev.c
ff-core.c
ff-memless.c
input-compat.c
input-compat.h
input-leds.c Input: leds - fix out of bound access 2018-05-09 09:50:20 +02:00
input-mt.c
input-polldev.c
input.c
joydev.c
Kconfig
Makefile
matrix-keymap.c
mousedev.c Input: mousedev - fix implicit conversion warning 2018-04-08 12:12:43 +02:00
sparse-keymap.c