Min Chong 8774e2f3f4 input: synaptics: add bounds checks for firmware id ...

A series of characters between '0' and '9' with a length more than
MAX_FIRMWARE_ID_LEN causes a heap buffer overflow. This is
mitigated by performing a bounds check.

Bug: 31911920
Signed-off-by: Min Chong <mchong@google.com>
Change-Id: Iaefe92df2610153f2d3e2caa58322ae82cb5b7c2
[razorloves: Backport to 3.4]
CVE-2016-8393
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>

2019-08-08 14:43:03 +02:00

..

gameport

…

joystick

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

keyboard

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

misc

Input: powermate - fix oops with malicious USB descriptors

2019-08-06 12:17:40 +02:00

mouse

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

serio

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

tablet

USB: input: gtco.c: fix up dev_* messages

2019-08-08 11:51:26 +02:00

touchscreen

input: synaptics: add bounds checks for firmware id

2019-08-08 14:43:03 +02:00

apm-power.c

…

evbug.c

…

evdev.c

Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0

2019-08-06 11:41:21 +02:00

ff-core.c

…

ff-memless.c

…

fixp-arith.h

…

input_booster.c

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

input-compat.c

…

input-compat.h

…

input-mt.c

…

input-polldev.c

…

input.c

Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0

2019-08-06 11:41:21 +02:00

joydev.c

…

Kconfig

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

keyreset.c

…

Makefile

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

mousedev.c

…

of_keymap.c

…

sparse-keymap.c

…