iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/hid
History
Dan Carpenter 341746d52e HID: roccat: add bounds checking in kone_sysfs_write_settings() 
[ Upstream commit d4f98dbfe717490e771b6e701904bfcf4b4557f0 ]

This code doesn't check if "settings->startup_profile" is within bounds
and that could result in an out of bounds array access.  What the code
does do is it checks if the settings can be written to the firmware, so
it's possible that the firmware has a bounds check?  It's safer and
easier to verify when the bounds checking is done in the kernel.

Fixes: 14bf62cde794 ("HID: add driver for Roccat Kone gaming mouse")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-29 09:05:35 +01:00
..
i2c-hid
HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands
2020-09-03 11:21:20 +02:00
intel-ish-hid
HID: intel-ish-hid: fixes incorrect error handling
2019-12-05 15:34:28 +01:00
usbhid
HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
2020-09-03 11:21:23 +02:00
hid-a4tech.c
HID: input: fix a4tech horizontal wheel custom usage
2019-09-06 10:19:33 +02:00
hid-alps.c
Merge branches 'for-4.8/upstream-fixes', 'for-4.9/alps', 'for-4.9/hid-input', 'for-4.9/intel-ish', 'for-4.9/kye-uclogic-waltop-fixes', 'for-4.9/logitech', 'for-4.9/sony', 'for-4.9/upstream' and 'for-4.9/wacom' into for-linus
2016-10-07 09:59:48 +02:00
hid-apple.c
HID: apple: Disable Fn-key key-re-mapping on clone keyboards
2020-07-31 16:44:03 +02:00
hid-appleir.c
HID: hid-input: allow input_configured callback return errors
2015-11-05 09:51:50 -08:00
hid-asus.c
HID: asus: add support for VivoBook E200HA
2016-04-04 09:59:21 +02:00
hid-aureal.c
HID: fix some indenting issues
2015-10-21 13:15:53 +02:00
hid-axff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-belkin.c
…
hid-betopff.c
HID: betop: add drivers/hid/hid-betopff.c
2014-12-22 15:00:25 +01:00
hid-cherry.c
HID: fix a couple of off-by-ones
2014-08-21 10:43:28 -05:00
hid-chicony.c
HID: chicony: Add support for another ASUS Zen AiO keyboard
2017-12-14 09:28:18 +01:00
hid-cmedia.c
HID: Support for CMedia CM6533 HID audio jack controls
2016-03-02 10:31:36 +01:00
hid-core.c
HID: core: Correctly handle ReportSize being zero
2020-09-12 11:47:31 +02:00
hid-corsair.c
HID: corsair: Add driver Scimitar Pro RGB gaming mouse 1b1c:1b3e support to hid-corsair
2017-12-25 14:23:37 +01:00
hid-cp2112.c
HID: cp2112: fix broken gpio_direction_input callback
2017-12-20 10:07:26 +01:00
hid-cypress.c
HID: hid-cypress: validate length of report
2017-01-15 13:42:56 +01:00
hid-debug.c
HID: debug: fix race condition with between rdesc_show() and device removal
2019-05-08 07:19:08 +02:00
hid-dr.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-elecom.c
HID: fix some indenting issues
2015-10-21 13:15:53 +02:00
hid-elo.c
HID: elo: clear BTN_LEFT mapping
2018-03-22 09:17:53 +01:00
hid-emsff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-ezkey.c
…
hid-gaff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-gembird.c
HID: gembird: add new driver to fix Gembird JPD-DualForce 2
2015-08-18 15:03:43 +02:00
hid-generic.c
…
hid-gfrm.c
HID: hid-gfrm: avoid warning for input_configured API change
2015-11-05 10:15:35 -08:00
hid-gt683r.c
HID: use to_hid_device()
2015-12-28 13:41:44 +01:00
hid-gyration.c
…
hid-holtek-kbd.c
HID: holtek: test for sanity of intfdata
2019-08-25 10:51:44 +02:00
hid-holtek-mouse.c
HID: Add Holtek USB ID 04d9:a0c2 ETEKCITY Scroll
2014-09-08 09:48:56 +02:00
hid-holtekff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-hyperv.c
HID: hyperv: match wait_for_completion_timeout return type
2015-01-26 14:25:41 +01:00
hid-icade.c
…
hid-ids.h
HID: multitouch: add eGalaxTouch P80H84 support
2020-05-27 16:41:45 +02:00
hid-input.c
HID: core: Sanitize event code and type when mapping input
2020-09-12 11:47:31 +02:00
hid-kensington.c
…
hid-keytouch.c
…
hid-kye.c
HID: kye: Fix MousePen i608X v2 report descriptor
2016-09-19 14:32:22 +02:00
hid-lcpower.c
…
hid-led.c
HID: hid-led: fix issue with transfer buffer not being dma capable
2016-10-10 10:47:03 +02:00
hid-lenovo.c
HID: lenovo: Add checks to fix of_led_classdev_register
2019-02-12 19:44:59 +01:00
hid-lg2ff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-lg3ff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-lg4ff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-lg4ff.h
HID: hid-logitech: Add combined pedal support Logitech wheels
2016-09-26 15:39:54 +02:00
hid-lg.c
HID: logitech: Fix general protection fault caused by Logitech driver
2019-10-05 12:30:06 +02:00
hid-lg.h
HID: hid-lg4ff: Introduce a module parameter to disable automatic switch of compatibility mode
2015-02-18 21:14:54 +01:00
hid-lgff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-logitech-dj.c
HID: logitech-dj: check report length
2014-12-17 08:50:12 +01:00
hid-logitech-hidpp.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-magicmouse.c
HID: magicmouse: do not set up autorepeat
2020-07-22 09:10:51 +02:00
hid-microsoft.c
HID: multitouch: enable the Surface 3 Type Cover to report multitouch data
2017-04-12 12:41:16 +02:00
hid-monterey.c
HID: fix a couple of off-by-ones
2014-08-21 10:43:28 -05:00
hid-multitouch.c
HID: core: Sanitize event code and type when mapping input
2020-09-12 11:47:31 +02:00
hid-ntrig.c
HID: hid-ntrig: add error handling for sysfs_create_group
2018-10-03 17:01:47 -07:00
hid-ortek.c
…
hid-penmount.c
HID: penmount: report only one button for PenMount 6000 USB touchscreen controller
2016-03-10 17:17:26 +01:00
hid-petalynx.c
HID: fix a couple of off-by-ones
2014-08-21 10:43:28 -05:00
hid-picolcd_backlight.c
HID: picoLCD: Deletion of unnecessary checks before three function calls
2015-06-29 14:51:12 +02:00
hid-picolcd_cir.c
HID: picoLCD: Deletion of unnecessary checks before three function calls
2015-06-29 14:51:12 +02:00
hid-picolcd_core.c
HID: picolcd: be more verbose when reporting report size error
2014-08-27 23:27:10 +02:00
hid-picolcd_debugfs.c
…
hid-picolcd_fb.c
…
hid-picolcd_lcd.c
HID: picoLCD: Deletion of unnecessary checks before three function calls
2015-06-29 14:51:12 +02:00
hid-picolcd_leds.c
HID: use to_hid_device()
2015-12-28 13:41:44 +01:00
hid-picolcd.h
…
hid-pl.c
…
hid-plantronics.c
HID: hid-plantronics: Re-resend Update to map button for PTT products
2018-08-03 07:55:21 +02:00
hid-primax.c
…
hid-prodikeys.c
HID: prodikeys: Fix general protection fault during probe
2019-10-05 12:30:06 +02:00
hid-rmi.c
HID: Fix hid_report_len usage
2018-04-24 09:34:11 +02:00
hid-roccat-arvo.c
HID: use kobj_to_dev()
2015-12-28 13:41:51 +01:00
hid-roccat-arvo.h
…
hid-roccat-common.c
HID: use kobj_to_dev()
2015-12-28 13:41:51 +01:00
hid-roccat-common.h
…
hid-roccat-isku.c
HID: use kobj_to_dev()
2015-12-28 13:41:51 +01:00
hid-roccat-isku.h
…
hid-roccat-kone.c
HID: roccat: add bounds checking in kone_sysfs_write_settings()
2020-10-29 09:05:35 +01:00
hid-roccat-kone.h
…
hid-roccat-koneplus.c
HID: use kobj_to_dev()
2015-12-28 13:41:51 +01:00
hid-roccat-koneplus.h
…
hid-roccat-konepure.c
…
hid-roccat-kovaplus.c
HID: roccat: prevent an out of bounds read in kovaplus_profile_activated()
2018-05-30 07:50:21 +02:00
hid-roccat-kovaplus.h
…
hid-roccat-lua.c
HID: use kobj_to_dev()
2015-12-28 13:41:51 +01:00
hid-roccat-lua.h
…
hid-roccat-pyra.c
HID: use kobj_to_dev()
2015-12-28 13:41:51 +01:00
hid-roccat-pyra.h
…
hid-roccat-ryos.c
…
hid-roccat-savu.c
…
hid-roccat-savu.h
…
hid-roccat.c
HID: roccat: silence an uninitialized variable warning
2016-04-04 09:49:12 +02:00
hid-saitek.c
HID: hid-saitek: Add device ID for RAT 7 Contagion
2018-10-10 08:53:20 +02:00
hid-samsung.c
…
hid-sensor-custom.c
HID: sensor: fix attributes in HID sensor interface
2016-11-05 16:56:09 +01:00
hid-sensor-hub.c
HID: sensor-hub: add quirk for Microchip MM7150
2017-04-12 12:41:16 +02:00
hid-sjoy.c
HID: sjoy: support Super Joy Box 4
2015-05-07 10:47:53 +02:00
hid-sony.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-speedlink.c
…
hid-steelseries.c
HID: use to_hid_device()
2015-12-28 13:41:44 +01:00
hid-sunplus.c
HID: fix a couple of off-by-ones
2014-08-21 10:43:28 -05:00
hid-tivo.c
HID: tivo: enable all buttons on the TiVo Slide Pro remote
2015-03-15 10:04:27 -04:00
hid-tmff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-topseed.c
…
hid-twinhan.c
…
hid-uclogic.c
HID: uclogic: Add support for UC-Logic TWHA60 v3
2016-09-19 14:32:24 +02:00
hid-waltop.c
HID: Remove broken links to tablet descriptions
2016-09-19 14:32:21 +02:00
hid-wiimote-core.c
…
hid-wiimote-debug.c
…
hid-wiimote-modules.c
HID: wiimote: Fix wiimote mp scale linearization
2016-03-18 17:31:38 +01:00
hid-wiimote.h
HID: use to_hid_device()
2015-12-28 13:41:44 +01:00
hid-xinmo.c
HID: xinmo: fix for out of range for THT 2P arcade controller.
2017-12-25 14:23:40 +01:00
hid-zpff.c
HID: Fix assumption that devices have inputs
2019-11-06 12:18:20 +01:00
hid-zydacron.c
…
hidraw.c
HID: hidraw, uhid: Always report EPOLLOUT
2020-01-23 08:19:33 +01:00
Kconfig
HID: corsair: Add driver Scimitar Pro RGB gaming mouse 1b1c:1b3e support to hid-corsair
2017-12-25 14:23:37 +01:00
Makefile
HID: intel_ish-hid: ISH Transport layer
2016-08-17 11:13:07 +02:00
uhid.c
HID: hidraw, uhid: Always report EPOLLOUT
2020-01-23 08:19:33 +01:00
wacom_sys.c
HID: Fix hid_report_len usage
2018-04-24 09:34:11 +02:00
wacom_wac.c
HID: wacom: Correct distance scale for 2nd-gen Intuos devices
2019-09-06 10:19:36 +02:00
wacom_wac.h
Merge branches 'for-4.8/upstream-fixes', 'for-4.9/alps', 'for-4.9/hid-input', 'for-4.9/intel-ish', 'for-4.9/kye-uclogic-waltop-fixes', 'for-4.9/logitech', 'for-4.9/sony', 'for-4.9/upstream' and 'for-4.9/wacom' into for-linus
2016-10-07 09:59:48 +02:00
wacom.h
HID: wacom: power_supply: provide the actual model_name
2016-08-05 13:39:23 +02:00