Re: [PATCH v2 1/3] HID: logitech-dj: check report length

2014-12-16 Thread Jiri Kosina
On Tue, 16 Dec 2014, Peter Wu wrote: > Malicious USB devices can send bogus reports smaller than the expected > buffer size. Ensure that the length is valid to avoid reading out of > bounds. > > Signed-off-by: Peter Wu > --- > v1: patch 2/3 HID: logitech-{dj,hidpp}: check report length > v2: s

Re: [PATCH v2 1/3] HID: logitech-dj: check report length

2014-12-16 Thread Benjamin Tissoires
On Tue, Dec 16, 2014 at 10:55 AM, Peter Wu wrote: > Malicious USB devices can send bogus reports smaller than the expected > buffer size. Ensure that the length is valid to avoid reading out of > bounds. > > Signed-off-by: Peter Wu > --- > v1: patch 2/3 HID: logitech-{dj,hidpp}: check report len

[PATCH v2 1/3] HID: logitech-dj: check report length

2014-12-16 Thread Peter Wu
Malicious USB devices can send bogus reports smaller than the expected buffer size. Ensure that the length is valid to avoid reading out of bounds. Signed-off-by: Peter Wu --- v1: patch 2/3 HID: logitech-{dj,hidpp}: check report length v2: splitted original report length check patch --- driver