Just roll something like the following into your patch.

regards,
dan carpenter

diff --git a/drivers/input/serio/hyperv-keyboard.c 
b/drivers/input/serio/hyperv-keyboard.c
index 0d4625f..262721b 100644
--- a/drivers/input/serio/hyperv-keyboard.c
+++ b/drivers/input/serio/hyperv-keyboard.c
@@ -151,15 +151,18 @@ static void hv_kbd_free_device(struct hv_kbd_dev *device)
 }
 
 static void hv_kbd_on_receive(struct hv_device *device,
-                               struct vmpacket_descriptor *packet)
+                             struct vmpacket_descriptor *packet, size_t size)
 {
        struct synth_kbd_msg *msg;
        struct hv_kbd_dev *kbd_dev = hv_get_drvdata(device);
        struct synth_kbd_keystroke *ks_msg;
+       int offset;
        u16 scan_code;
 
-       msg = (struct synth_kbd_msg *)((unsigned long)packet +
-                                       (packet->offset8 << 3));
+       offset = packet->offset8 << 3;
+       if (offset + sizeof(struct synth_kbd_protocol_response) > size)
+               return;
+       msg = (void *)packet + offset;
 
        switch (msg->header.type) {
        case SYNTH_KBD_PROTOCOL_RESPONSE:
@@ -220,7 +223,7 @@ static void hv_kbd_on_channel_callback(void *context)
                                break;
 
                        case VM_PKT_DATA_INBAND:
-                               hv_kbd_on_receive(device, desc);
+                               hv_kbd_on_receive(device, desc, bytes_recvd);
                                break;
 
                        default:
_______________________________________________
devel mailing list
de...@linuxdriverproject.org
http://driverdev.linuxdriverproject.org/mailman/listinfo/driverdev-devel

Reply via email to