Re: [PATCH] HID: i2c-hid: allocate hid buffers for real worst case

[PATCH] HID: i2c-hid: allocate hid buffers for real worst case · Dmitry Torokhov <dmitry.torokhov@gmail.com> · 2017-09-08
Re: [PATCH] HID: i2c-hid: allocate hid buffers for real worst case · Jiri Kosina <jikos@kernel.org> · 2017-09-13
Re: [PATCH] HID: i2c-hid: allocate hid buffers for real worst case · Dmitry Torokhov <dmitry.torokhov@gmail.com> · 2017-09-13
Re: [PATCH] HID: i2c-hid: allocate hid buffers for real worst case · Jiri Kosina <jikos@kernel.org> · 2017-09-13
Re: [PATCH] HID: i2c-hid: allocate hid buffers for real worst case · Benson Leung <hidden> · 2017-09-13
Re: [PATCH] HID: i2c-hid: allocate hid buffers for real worst case · Jiri Kosina <jikos@kernel.org> · 2017-09-13

From: Jiri Kosina <jikos@kernel.org>
Date: 2017-09-13 14:02:09
Also in: lkml

On Fri, 8 Sep 2017, Dmitry Torokhov wrote:

From: Adrian Salido <redacted>

The buffer allocation is not currently accounting for an extra byte for
the report id. This can cause an out of bounds access in function
i2c_hid_set_or_send_report() with reportID > 15.

Signed-off-by: Guenter Roeck <groeck@chromium.org>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>

Missing signoff from the patch author?

Also, I think this should have Cc: stable, right?

Thanks,

-- 
Jiri Kosina
SUSE Labs

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help