Thread (3 messages) 3 messages, 3 authors, 2023-05-23

Re: [PATCH] HID: wacom: avoid integer overflow in wacom_intuos_inout()

From: Jiri Kosina <jikos@kernel.org>
Date: 2023-05-23 13:09:45
Also in: lkml

On Mon, 17 Apr 2023, Nikita Zhandarovich wrote:
If high bit is set to 1 in ((data[3] & 0x0f << 28), after all arithmetic
operations and integer promotions are done, high bits in
wacom->serial[idx] will be filled with 1s as well.
Avoid this, albeit unlikely, issue by specifying left operand's __u64
type for the right operand.

Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.

Fixes: 3bea733ab212 ("USB: wacom tablet driver reorganization")
Signed-off-by: Nikita Zhandarovich <redacted>
Applied. Thanks for the fix, and sorry for the delay.

-- 
Jiri Kosina
SUSE Labs
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help