android_kernel_google_msm/drivers/hid
Kees Cook 12c1f610fe HID: picolcd_core: validate output report details
commit 1e87a2456b upstream.

A HID device could send a malicious output report that would cause the
picolcd HID driver to trigger a NULL dereference during attr file writing.

[jkosina@suse.cz: changed

	report->maxfield < 1

to

	report->maxfield != 1

as suggested by Bruno].

CVE-2013-2899

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@kernel.org
Reviewed-by: Bruno Prémont <bonbons@linux-vserver.org>
Acked-by: Bruno Prémont <bonbons@linux-vserver.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
[Kefeng: backported to stable 3.4: adjust filename]
Signed-off-by: Kefeng Wang <wangkefeng.wang@huawei.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-12-08 07:29:42 -08:00
..
usbhid HID: usbhid: quirk for N-Trig DuoSense Touch Screen 2013-09-26 17:15:49 -07:00
hid-a4tech.c
hid-apple.c HID: apple: option to swap the 'Option' ("Alt") and 'Command' ("Flag") keys. 2013-12-04 10:50:35 -08:00
hid-axff.c hid: Add module.h to fix up implicit users of it 2011-10-31 19:31:17 -04:00
hid-belkin.c
hid-cherry.c
hid-chicony.c HID: add ASUS AIO keyboard model AK1D 2012-08-15 08:10:30 -07:00
hid-core.c HID: provide a helper for validating hid reports 2013-10-01 09:10:51 -07:00
hid-cypress.c HID: add support for Cypress barcode scanner 04B4:ED81 2012-08-15 08:10:30 -07:00
hid-debug.c Merge branches 'hyperv', 'multitouch', 'roccat', 'upstream', 'upstream-fixes', 'wacom' and 'wiimote' into for-linus 2012-01-05 15:51:02 +01:00
hid-dr.c hid: Add module.h to fix up implicit users of it 2011-10-31 19:31:17 -04:00
hid-elecom.c
hid-emsff.c Merge branches 'hyperv', 'multitouch', 'roccat', 'upstream', 'upstream-fixes', 'wacom' and 'wiimote' into for-linus 2012-01-05 15:51:02 +01:00
hid-ezkey.c
hid-gaff.c hid: Add module.h to fix up implicit users of it 2011-10-31 19:31:17 -04:00
hid-gyration.c
hid-holtekff.c hid: Add module.h to fix up implicit users of it 2011-10-31 19:31:17 -04:00
hid-hyperv.c HID: hyperv: Properly disconnect the input device 2012-02-02 10:56:11 +01:00
hid-ids.h HID: usbhid: quirk for N-Trig DuoSense Touch Screen 2013-09-26 17:15:49 -07:00
hid-input.c HID: battery: don't do DMA from stack 2013-09-26 17:15:49 -07:00
hid-kensington.c
hid-keytouch.c
hid-kye.c HID: kye: Add support for 3 tablets 2012-02-28 13:37:12 +01:00
hid-lcpower.c
hid-lg.c HID: lg4ff - Add range setting support and sysfs interface 2011-08-04 16:45:55 +02:00
hid-lg.h HID: lg4ff - Fix misleading info in Kconfig 2011-08-04 16:45:55 +02:00
hid-lg2ff.c HID: LG: validate HID output report details 2013-10-05 07:06:54 -07:00
hid-lg3ff.c HID: LG: validate HID output report details 2013-10-05 07:06:54 -07:00
hid-lg4ff.c HID: LG: validate HID output report details 2013-10-05 07:06:54 -07:00
hid-lgff.c HID: LG: validate HID output report details 2013-10-05 07:06:54 -07:00
hid-logitech-dj.c HID: logitech-dj: validate output report details 2013-10-01 09:10:51 -07:00
hid-logitech-dj.h HID: Fix logitech-dj: missing Unifying device issue 2012-10-02 10:30:06 -07:00
hid-magicmouse.c HID: hid-magicmouse: Add pointer and buttonpad properties for Magic Trackpad 2012-02-21 11:52:20 +01:00
hid-microsoft.c HID: microsoft: do not use compound literal - fix build 2013-08-20 08:26:27 -07:00
hid-monterey.c
hid-multitouch.c HID: multitouch: add support for Novatek touchscreen 2012-08-15 08:10:30 -07:00
hid-ntrig.c HID: ntrig: validate feature report details 2013-09-26 17:15:36 -07:00
hid-ortek.c
hid-petalynx.c
hid-picolcd.c HID: picolcd_core: validate output report details 2013-12-08 07:29:42 -08:00
hid-pl.c HID: pantherlord: validate output report details 2013-09-26 17:15:34 -07:00
hid-primax.c HID: support primax keyboards violating USB HID spec 2011-10-17 17:04:41 +02:00
hid-prodikeys.c module_param: make bool parameters really bool (drivers & misc) 2012-01-13 09:32:20 +10:30
hid-roccat-arvo.c
hid-roccat-arvo.h
hid-roccat-common.c Merge branches 'hyperv', 'multitouch', 'roccat', 'upstream', 'upstream-fixes', 'wacom' and 'wiimote' into for-linus 2012-01-05 15:51:02 +01:00
hid-roccat-common.h
hid-roccat-isku.c HID: roccat: Add support for Isku keyboard 2011-12-06 10:21:10 +01:00
hid-roccat-isku.h HID: roccat: Add support for Isku keyboard 2011-12-06 10:21:10 +01:00
hid-roccat-kone.c HID: roccat: Use kmemdup rather than duplicating its implementation 2011-11-20 00:42:42 +01:00
hid-roccat-kone.h
hid-roccat-koneplus.c
hid-roccat-koneplus.h
hid-roccat-kovaplus.c HID: roccat: fix Coverity CID 141438 2013-12-04 10:50:35 -08:00
hid-roccat-kovaplus.h
hid-roccat-pyra.c HID: roccat: Pyra now reports external profile changes via roccat device 2011-09-07 13:38:27 +02:00
hid-roccat-pyra.h
hid-roccat.c Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kernel/git/paulg/linux 2011-11-06 19:44:47 -08:00
hid-saitek.c HID: add new driver for non-compliant Saitek devices 2012-02-22 11:30:17 +01:00
hid-samsung.c
hid-sjoy.c HID: sjoy: Add device ID for Super Joy Box 3 2012-02-21 14:16:36 +01:00
hid-sony.c
hid-speedlink.c HID: Fix Speedlink VAD Cezanne support for some devices 2013-09-26 17:15:34 -07:00
hid-sunplus.c
hid-tivo.c HID: tivo: fix support for bluetooth version of tivo Slide 2012-03-30 15:28:59 +02:00
hid-tmff.c hid: Add module.h to fix up implicit users of it 2011-10-31 19:31:17 -04:00
hid-topseed.c
hid-twinhan.c misc latin1 to utf8 conversions 2012-01-02 13:04:55 +01:00
hid-uclogic.c HID: uclogic: Replace original rdescs with links 2012-03-06 11:20:54 +01:00
hid-wacom.c Merge branch 'upstream' into for-linus 2012-03-20 13:18:05 +01:00
hid-waltop.c HID: waltop: Add support for tablet with PID 0038 2012-03-06 11:20:55 +01:00
hid-wiimote-core.c HID: wiimote: Fix IR data parser 2012-06-01 15:18:17 +08:00
hid-wiimote-debug.c simple_open: automatically convert to simple_open() 2012-04-05 15:25:50 -07:00
hid-wiimote-ext.c HID: wiimote: fix nunchuck button parser 2013-02-28 06:59:05 -08:00
hid-wiimote.h HID: wiimote: Allow direct DRM debug access 2011-11-22 23:11:10 +01:00
hid-zpff.c HID: zeroplus: validate output report details 2013-10-01 09:10:51 -07:00
hid-zydacron.c HID: zydacron: kfree() NULL pointer cleanup 2011-08-04 23:51:29 +02:00
hidraw.c Merge branch 'upstream' into for-linus 2011-10-25 09:59:04 +02:00
Kconfig HID: default HID_BATTERY_STRENGTH to no 2012-04-19 14:16:43 +02:00
Makefile Merge branch 'upstream' into for-linus 2012-03-20 13:18:05 +01:00