1. 13 Jul, 2019 1 commit
    • Grant Hernandez's avatar
      Input: gtco - bounds check collection indent level · 2a017fd8
      Grant Hernandez authored
      The GTCO tablet input driver configures itself from an HID report sent
      via USB during the initial enumeration process. Some debugging messages
      are generated during the parsing. A debugging message indentation
      counter is not bounds checked, leading to the ability for a specially
      crafted HID report to cause '-' and null bytes be written past the end
      of the indentation array. As long as the kernel has CONFIG_DYNAMIC_DEBUG
      enabled, this code will not be optimized out.  This was discovered
      during code review after a previous syzkaller bug was found in this
      driver.
      Signed-off-by: default avatarGrant Hernandez <granthernandez@google.com>
      Cc: stable@vger.kernel.org
      Signed-off-by: default avatarDmitry Torokhov <dmitry.torokhov@gmail.com>
      2a017fd8
  2. 12 Jul, 2019 3 commits
  3. 07 Jul, 2019 1 commit
  4. 05 Jul, 2019 2 commits
  5. 01 Jul, 2019 1 commit
  6. 30 Jun, 2019 5 commits
  7. 23 Jun, 2019 22 commits
  8. 28 May, 2019 5 commits