anierin/msm-5.15
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
94de3b405c8dee0ffc8de5c06b32fbf00fc4e8f9
msm-5.15/drivers/hid
History
Pietro Borrello 617c5ccc25 UPSTREAM: hid: bigben_probe(): validate report count 
[ Upstream commit b94335f899542a0da5fafc38af8edcaf90195843 ]

bigben_probe() does not validate that the output report has the
needed report values in the first field.
A malicious device registering a report with one field and a single
value causes an head OOB write in bigben_worker() when
accessing report_field->value[1] to report_field->value[7].
Use hid_validate_values() which takes care of all the needed checks.

Bug: 268589017
Fixes: 256a90ed9e ("HID: hid-bigbenff: driver for BigBen Interactive PS3OFMINIPAD gamepad")
Signed-off-by: Pietro Borrello <borrello@diag.uniroma1.it>
Link: https://lore.kernel.org/r/20230211-bigben-oob-v1-1-d2849688594c@diag.uniroma1.it
Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I575c5d4c8a63a2065752a45c47b23cf725cc57ae
2023-04-03 07:29:30 +00:00
..
amd-sfh-hid
HID: amd_sfh: Add missing check for dma_alloc_coherent
2022-12-31 13:14:39 +01:00
i2c-hid
HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
2022-04-08 14:23:31 +02:00
intel-ish-hid
HID: intel_ish-hid: Add check for ishtp_dma_tx_map
2023-02-01 08:27:04 +01:00
surface-hid
HID: surface-hid: Allow driver matching for target ID 1 devices
2021-11-18 19:15:59 +01:00
usbhid
Merge branch 'for-5.15/core' into for-linus
2021-09-01 22:00:06 +02:00
hid-a4tech.c
HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
2021-05-05 14:29:13 +02:00
hid-accutouch.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-alps.c
HID: alps: Declare U1_UNICORN_LEGACY support
2022-08-17 14:23:57 +02:00
hid-apple.c
HID: apple: Do not reset quirks when the Fn key is not found
2022-01-27 11:04:27 +01:00
hid-appleir.c
HID: appleir: Use devm_kzalloc() instead of kzalloc()
2020-03-13 17:33:11 +01:00
hid-asus.c
HID: asus: ROG NKey: Ignore portion of 0x5a report
2022-09-05 10:30:08 +02:00
hid-aureal.c
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
hid-axff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-belkin.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-betopff.c
HID: betop: check shape of output reports
2023-02-01 08:27:13 +01:00
hid-bigbenff.c
UPSTREAM: hid: bigben_probe(): validate report count
2023-04-03 07:29:30 +00:00
hid-cherry.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-chicony.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-cmedia.c
HID: cmedia: add support for HS-100B mute button
2021-07-28 11:51:07 +02:00
hid-core.c
HID: check empty report_list in hid_validate_values()
2023-02-01 08:27:10 +01:00
hid-corsair.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-cougar.c
HID: cougar: Constify cougar_id_table
2020-08-17 11:38:49 +02:00
hid-cp2112.c
HID: cp2112: prevent a buffer overflow in cp2112_xfer()
2022-08-17 14:23:40 +02:00
hid-creative-sb0540.c
HID: sb0540: add support for Creative SB0540 IR receivers
2019-09-03 16:52:04 +02:00
hid-cypress.c
HID: cypress: Support Varmilo Keyboards' media hotkeys
2020-10-23 13:23:44 +02:00
hid-debug.c
HID: add mapping for KEY_ALL_APPLICATIONS
2022-03-08 19:12:53 +01:00
hid-dr.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-elan.c
HID: elan: Fix potential double free in elan_input_configured
2022-06-09 10:22:47 +02:00
hid-elecom.c
HID: elecom: drop stray comment
2020-11-25 17:40:23 +01:00
hid-elo.c
HID: elo: Revert USB reference counting
2022-03-16 14:23:35 +01:00
hid-emsff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-ezkey.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-ft260.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-gaff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-gembird.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-generic.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-gfrm.c
HID: do not call hid_set_drvdata(hdev, NULL) in drivers
2019-08-22 17:11:58 +02:00
hid-glorious.c
HID: Add driver fixing Glorious PC Gaming Race mouse report descriptor
2020-03-18 13:36:21 +01:00
hid-google-hammer.c
HID: google: add eel USB id
2021-12-14 10:57:05 +01:00
hid-gt683r.c
HID: gt683r: add missing MODULE_DEVICE_TABLE
2021-05-27 15:40:34 +02:00
hid-gyration.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-holtek-kbd.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-holtek-mouse.c
HID: holtek: fix mouse probing
2021-12-29 12:28:37 +01:00
hid-holtekff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-hyperv.c
HID: hyperv: fix possible memory leak in mousevsc_probe()
2022-11-16 09:58:15 +01:00
hid-icade.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-ids.h
Merge 5.15.91 into android13-5.15-lts
2023-02-01 16:05:31 +00:00
hid-input.c
FROMLIST: input: Add KEY_CAMERA_FOCUS event in HID
2023-02-17 15:06:38 +00:00
hid-ite.c
HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
2022-12-14 11:37:21 +01:00
hid-jabra.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-kensington.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-keytouch.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-kye.c
HID: hid-kye: Fix incorrect function name for kye_tablet_enable()
2021-04-07 18:46:20 +02:00
hid-lcpower.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-led.c
HID: hid-led: fix maximum brightness for Dream Cheeky
2022-06-09 10:22:47 +02:00
hid-lenovo.c
HID: lenovo: Add support for Thinkpad X1 Tablet Thin keyboard
2021-04-07 12:48:20 +02:00
hid-lg2ff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-lg3ff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-lg4ff.c
HID: hid-lg4ff: Add check for empty lbuf
2022-12-14 11:37:21 +01:00
hid-lg4ff.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
hid-lg-g15.c
HID: lg-g15 + ite: Add MODULE_AUTHOR
2021-05-05 14:39:24 +02:00
hid-lg.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-lg.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
hid-lgff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-logitech-dj.c
HID: logitech-dj: add new lightspeed receiver id
2022-04-08 14:22:46 +02:00
hid-logitech-hidpp.c
HID: logitech-hidpp: battery: provide CAPACITY property for newer devices
2021-08-20 14:32:39 +02:00
hid-macally.c
HID: macally: Constify macally_id_table
2020-08-17 11:38:49 +02:00
hid-magicmouse.c
HID: magicmouse: Do not set BTN_MOUSE on double report
2022-10-29 10:12:55 +02:00
hid-maltron.c
Support for Maltron L90 keyboard media keys
2019-01-14 20:11:01 +01:00
hid-mcp2221.c
HID: mcp2221: don't connect hidraw
2022-12-31 13:14:46 +01:00
hid-mf.c
HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter
2020-11-25 14:30:33 +01:00
hid-microsoft.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid
2020-09-02 12:55:46 -07:00
hid-monterey.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-multitouch.c
HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
2023-01-12 11:58:46 +01:00
hid-nintendo.c
FROMLIST: HID: nintendo: add nintendo switch controller driver
2020-03-31 18:20:13 +00:00
hid-nti.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-ntrig.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-ortek.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-penmount.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-petalynx.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-picolcd_backlight.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265
2019-06-05 17:30:28 +02:00
hid-picolcd_cir.c
media: rc: harmonize infrared durations to microseconds
2020-09-03 16:18:55 +02:00
hid-picolcd_core.c
HID: hid-picolcd_core: Remove unused variable 'ret'
2021-04-07 18:46:20 +02:00
hid-picolcd_debugfs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265
2019-06-05 17:30:28 +02:00
hid-picolcd_fb.c
Merge branch 'for-5.7/appleir' into for-linus
2020-04-01 12:26:12 +02:00
hid-picolcd_lcd.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265
2019-06-05 17:30:28 +02:00
hid-picolcd_leds.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265
2019-06-05 17:30:28 +02:00
hid-picolcd.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265
2019-06-05 17:30:28 +02:00
hid-pl.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
hid-plantronics.c
HID: plantronics: Additional PIDs for double volume key presses quirk
2023-01-12 11:58:46 +01:00
hid-playstation.c
Merge 5.15.92 into android13-5.15-lts
2023-02-06 10:49:23 +00:00
hid-primax.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282
2019-06-05 17:36:37 +02:00
hid-prodikeys.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-quirks.c
HID: revert CHERRY_MOUSE_000C quirk
2023-02-01 08:27:11 +01:00
hid-redragon.c
HID: redragon: fix num lock and caps lock LEDs
2018-06-25 15:23:40 +02:00
hid-retrode.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-rmi.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2020-10-23 16:16:31 -07:00
hid-roccat-arvo.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-arvo.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-common.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-common.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-isku.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-isku.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-kone.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-kone.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-koneplus.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-koneplus.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-konepure.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-kovaplus.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-kovaplus.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-lua.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-lua.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-pyra.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-pyra.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat-ryos.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-savu.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-roccat-savu.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-roccat.c
UPSTREAM: HID: roccat: Fix use-after-free in roccat_read()
2022-12-05 23:33:01 +00:00
hid-saitek.c
HID: saitek: add madcatz variant of MMO7 mouse device ID
2022-11-10 18:15:34 +01:00
hid-samsung.c
HID: check for valid USB device for many HID drivers
2021-12-14 10:57:06 +01:00
hid-semitek.c
HID: semitek: new driver for GK6X series keyboards
2021-05-05 14:21:08 +02:00
hid-sensor-custom.c
HID: hid-sensor-custom: set fixed size for custom attributes
2022-12-31 13:14:11 +01:00
hid-sensor-hub.c
HID: hid-sensor-hub: Return error for hid_set_field() failure
2021-05-05 14:36:18 +02:00
hid-sjoy.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
hid-sony.c
HID: sony: fix error path in probe
2021-12-14 10:57:06 +01:00
hid-speedlink.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-steam.c
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
2022-09-05 10:30:06 +02:00
hid-steelseries.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-sunplus.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-thrustmaster.c
HID: thrustmaster: Add sparco wheel and fix array length
2022-09-05 10:30:08 +02:00
hid-tivo.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-tmff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-topseed.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-twinhan.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 178
2019-05-30 11:29:19 -07:00
hid-u2fzero.c
HID: add hid_is_usb() function to make it simpler for USB detection
2021-12-14 10:57:05 +01:00
hid-uclogic-core.c
HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
2022-12-21 17:36:38 +01:00
hid-uclogic-params.c
HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad
2022-01-27 11:03:55 +01:00
hid-uclogic-params.h
HID: uclogic: Support Gray-coded rotary encoders
2019-02-21 12:00:54 +01:00
hid-uclogic-rdesc.c
HID: hid-uclogic-rdesc: Kernel-doc is for functions and structs
2021-04-07 18:46:20 +02:00
hid-uclogic-rdesc.h
HID: uclogic: Add support for Ugee G5
2019-02-21 12:00:54 +01:00
hid-udraw-ps3.c
HID: udraw-ps3: Replace HTTP links with HTTPS ones
2020-07-20 12:24:41 +02:00
hid-viewsonic.c
HID: viewsonic: Support PD1011 signature pad
2019-02-21 12:00:53 +01:00
hid-vivaldi.c
HID: vivaldi: fix sysfs attributes leak
2022-03-16 14:23:35 +01:00
hid-waltop.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-wiimote-core.c
HID: wiimote: remove h from printk format specifier
2021-01-07 10:14:58 +01:00
hid-wiimote-debug.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-wiimote-modules.c
HID: Wiimote: Treat the d-pad as an analogue stick
2020-06-19 14:17:22 +02:00
hid-wiimote.h
HID: Wiimote: Treat the d-pad as an analogue stick
2020-06-19 14:17:22 +02:00
hid-xinmo.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hid-zpff.c
HID: Fix assumption that devices have inputs
2019-10-03 15:36:40 -04:00
hid-zydacron.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
hidraw.c
HID: hidraw: fix memory leak in hidraw_release()
2022-09-05 10:30:07 +02:00
Kconfig
Merge 5.15.8 into android13-5.15
2021-12-15 18:34:21 +01:00
Makefile
Merge 83ec916974 ("Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid") into android-mainline
2021-09-14 08:46:39 +02:00
uhid.c
HID: uhid: Fix worker destroying device without any protection
2022-01-27 11:02:46 +01:00
wacom_sys.c
HID: wacom: Ensure bootloader PID is usable in hidraw mode
2022-12-31 13:14:46 +01:00
wacom_wac.c
HID: wacom: Ensure bootloader PID is usable in hidraw mode
2022-12-31 13:14:46 +01:00
wacom_wac.h
HID: wacom: Ensure bootloader PID is usable in hidraw mode
2022-12-31 13:14:46 +01:00
wacom.h
HID: wacom: generic: Treat serial number and related fields as unsigned
2019-11-06 21:37:29 +01:00