linux/drivers/input/tablet
Grant Hernandez 2a017fd82c Input: gtco - bounds check collection indent level
The GTCO tablet input driver configures itself from an HID report sent
via USB during the initial enumeration process. Some debugging messages
are generated during the parsing. A debugging message indentation
counter is not bounds checked, leading to the ability for a specially
crafted HID report to cause '-' and null bytes be written past the end
of the indentation array. As long as the kernel has CONFIG_DYNAMIC_DEBUG
enabled, this code will not be optimized out.  This was discovered
during code review after a previous syzkaller bug was found in this
driver.

Signed-off-by: Grant Hernandez <granthernandez@google.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
2019-07-13 01:43:10 -07:00
..
acecad.c Input: inline macros for MODULE_LICENSE, etc 2018-01-17 09:52:22 -08:00
aiptek.c Input: aiptek - replace GFP_ATOMIC with GFP_KERNEL in aiptek_probe() 2018-07-27 11:59:10 -07:00
gtco.c Input: gtco - bounds check collection indent level 2019-07-13 01:43:10 -07:00
hanwang.c Input: inline macros for MODULE_LICENSE, etc 2018-01-17 09:52:22 -08:00
kbtab.c Input: inline macros for MODULE_LICENSE, etc 2018-01-17 09:52:22 -08:00
Kconfig Input: add Pegasus Notetaker tablet driver 2016-06-02 10:00:17 -07:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
pegasus_notetaker.c Input: pegasus_notetaker - do not rely on input_dev->users 2018-03-17 11:05:18 -07:00
wacom_serial4.c Input: wacom_serial4 - add support for Wacom ArtPad II tablet 2019-03-09 15:57:18 -08:00