Hi! > commit 25a097f5204675550afb879ee18238ca917cba7a upstream. > > `uref->usage_index` is not always being properly checked, causing > hiddev_ioctl_usage() to go out of bounds under some cases. Fix it.
Well, the code is quite confusig, but:
a) does HIDIOCGCOLLECTIONINDEX need same checking?
b) should we check this using some kind of _nospec() variant to
prevent speculation attacks?
Best regards,
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures)
http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
signature.asc
Description: PGP signature
