summaryrefslogtreecommitdiff
path: root/drivers/dma-buf
diff options
context:
space:
mode:
authorDmitry Torokhov <dmitry.torokhov@gmail.com>2019-12-13 14:56:16 -0800
committerDmitry Torokhov <dmitry.torokhov@gmail.com>2019-12-13 15:00:42 -0800
commitcb222aed03d798fc074be55e59d9a112338ee784 (patch)
treea94ae6b93178d73d0cee45ed20c1a085c17b1f5c /drivers/dma-buf
parentf729a1b0f8df7091cea3729fc0e414f5326e1163 (diff)
Input: add safety guards to input_set_keycode()
If we happen to have a garbage in input device's keycode table with values too big we'll end up doing clear_bit() with offset way outside of our bitmaps, damaging other objects within an input device or even outside of it. Let's add sanity checks to the returned old keycodes. Reported-by: syzbot+c769968809f9359b07aa@syzkaller.appspotmail.com Reported-by: syzbot+76f3a30e88d256644c78@syzkaller.appspotmail.com Link: https://lore.kernel.org/r/20191207212757.GA245964@dtor-ws Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Diffstat (limited to 'drivers/dma-buf')
0 files changed, 0 insertions, 0 deletions