Peilin Ye 25a097f520 HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() ...

`uref->usage_index` is not always being properly checked, causing
hiddev_ioctl_usage() to go out of bounds under some cases. Fix it.

Reported-by: syzbot+34ee1b45d88571c2fa8b@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?id=f2aebe90b8c56806b050a20b36f51ed6acabe802
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

2020-08-17 12:21:09 +02:00

..

i2c-hid

HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands

2020-08-17 12:08:50 +02:00

intel-ish-hid

HID: intel-ish-hid: Replace PCI_DEV_FLAGS_NO_D3 with pci_save_state

2020-07-07 12:18:47 +02:00

usbhid

HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()

2020-08-17 12:21:09 +02:00

hid-a4tech.c

HID: input: fix a4tech horizontal wheel custom usage

2019-08-05 14:37:15 +02:00

hid-accutouch.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-alps.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid into master

2020-07-17 09:43:13 -07:00

hid-apple.c

HID: apple: Disable Fn-key key-re-mapping on clone keyboards

2020-06-24 09:49:04 +02:00

hid-appleir.c

HID: appleir: Use devm_kzalloc() instead of kzalloc()

2020-03-13 17:33:11 +01:00

hid-asus.c

HID: asus: Fix mute and touchpad-toggle keys on Medion Akoya E1239T

2020-05-06 11:40:03 +02:00

hid-aureal.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

hid-axff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-belkin.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-betopff.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-bigbenff.c

HID: hid-bigbenff: fix race condition for scheduled work during removal

2020-02-18 14:43:51 +01:00

hid-cherry.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-chicony.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-cmedia.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282

2019-06-05 17:36:37 +02:00

hid-core.c

HID: core: fix off-by-one memset in hid_report_raw_event()

2020-02-12 14:18:33 +01:00

hid-corsair.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-cougar.c

HID: cougar: Constify cougar_id_table

2020-08-17 11:38:49 +02:00

hid-cp2112.c

HID: Replace HTTP links with HTTPS ones

2020-07-20 12:35:50 +02:00

hid-creative-sb0540.c

HID: sb0540: add support for Creative SB0540 IR receivers

2019-09-03 16:52:04 +02:00

hid-cypress.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-debug.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

hid-dr.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-elan.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-elecom.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-elo.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 307

2019-06-05 17:37:04 +02:00

hid-emsff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-ezkey.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-gaff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-gembird.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-generic.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-gfrm.c

HID: do not call hid_set_drvdata(hdev, NULL) in drivers

2019-08-22 17:11:58 +02:00

hid-glorious.c

HID: Add driver fixing Glorious PC Gaming Race mouse report descriptor

2020-03-18 13:36:21 +01:00

hid-google-hammer.c

HID: google: add moonball USB id

2020-03-16 14:51:05 +01:00

hid-gt683r.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157

2019-05-30 11:26:37 -07:00

hid-gyration.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-holtek-kbd.c

HID: holtek: test for sanity of intfdata

2019-08-05 14:18:42 +02:00

hid-holtek-mouse.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-holtekff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-hyperv.c

HID: hyperv: NULL check before some freeing functions is not needed.

2020-03-05 14:17:11 +00:00

hid-icade.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-ids.h

HID: quirks: Always poll three more Lenovo PixArt mice

2020-08-17 12:11:08 +02:00

hid-input.c

HID: input: Fix devices that return multiple bytes in battery report

2020-07-14 15:16:54 +02:00

hid-ite.c

HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock

2020-02-03 15:32:44 +01:00

hid-jabra.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-kensington.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-keytouch.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-kye.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-lcpower.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-led.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372

2019-06-05 17:37:10 +02:00

hid-lenovo.c

HID: lenovo: Fix spurious F23 key press report during resume from suspend

2020-07-07 12:42:27 +02:00

hid-lg2ff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-lg3ff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-lg4ff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-lg4ff.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

hid-lg-g15.c

HID: logitech: Add support for Logitech G11 extra keys

2020-04-14 11:15:36 +02:00

hid-lg.c

HID: logitech: Fix general protection fault caused by Logitech driver

2019-08-22 09:53:08 +02:00

hid-lg.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

hid-lgff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-logitech-dj.c

HID: logitech: Use HIDPP_RECEIVER_INDEX instead of 0xff

2020-07-07 12:37:22 +02:00

hid-logitech-hidpp.c

HID: logitech-hidpp: avoid repeated "multiplier = " log messages

2020-07-07 12:40:26 +02:00

hid-macally.c

HID: macally: Constify macally_id_table

2020-08-17 11:38:49 +02:00

hid-magicmouse.c

HID: magicmouse: do not set up autorepeat

2020-06-16 17:34:14 +02:00

hid-maltron.c

Support for Maltron L90 keyboard media keys

2019-01-14 20:11:01 +01:00

hid-mcp2221.c

HID: mcp2221: Replace HTTP links with HTTPS ones

2020-07-20 12:24:01 +02:00

hid-mf.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157

2019-05-30 11:26:37 -07:00

hid-microsoft.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-monterey.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-multitouch.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2020-06-10 13:51:47 -07:00

hid-nti.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-ntrig.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-ortek.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-penmount.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-petalynx.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-picolcd_backlight.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265

2019-06-05 17:30:28 +02:00

hid-picolcd_cir.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265

2019-06-05 17:30:28 +02:00

hid-picolcd_core.c

HID: do not call hid_set_drvdata(hdev, NULL) in drivers

2019-08-22 17:11:58 +02:00

hid-picolcd_debugfs.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265

2019-06-05 17:30:28 +02:00

hid-picolcd_fb.c

Merge branch 'for-5.7/appleir' into for-linus

2020-04-01 12:26:12 +02:00

hid-picolcd_lcd.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265

2019-06-05 17:30:28 +02:00

hid-picolcd_leds.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265

2019-06-05 17:30:28 +02:00

hid-picolcd.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 265

2019-06-05 17:30:28 +02:00

hid-pl.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

hid-plantronics.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-primax.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282

2019-06-05 17:36:37 +02:00

hid-prodikeys.c

HID: prodikeys: make array keys static const, makes object smaller

2019-10-01 16:21:04 +02:00

hid-quirks.c

HID: quirks: Always poll three more Lenovo PixArt mice

2020-08-17 12:11:08 +02:00

hid-redragon.c

HID: redragon: fix num lock and caps lock LEDs

2018-06-25 15:23:40 +02:00

hid-retrode.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-rmi.c

HID: rmi: Simplify an error handling path in 'rmi_hid_read_block()'

2020-03-23 00:08:51 +01:00

hid-roccat-arvo.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-arvo.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-common.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-common.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-isku.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-isku.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-kone.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-kone.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-koneplus.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-koneplus.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-konepure.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-kovaplus.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-kovaplus.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-lua.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-lua.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-pyra.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-pyra.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-ryos.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-savu.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat-savu.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-roccat.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-saitek.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-samsung.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-sensor-custom.c

HID: hid-sensor-custom: Use scnprintf() for avoiding potential buffer overflow

2020-03-11 11:58:58 +01:00

hid-sensor-hub.c

HID: do not call hid_set_drvdata(hdev, NULL) in drivers

2019-08-22 17:11:58 +02:00

hid-sjoy.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156

2019-05-30 11:26:35 -07:00

hid-sony.c

HID: sony: Fix for broken buttons on DS3 USB dongles

2020-05-26 11:00:49 +02:00

hid-speedlink.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-steam.c

HID: steam: fixes race in handling device list.

2020-06-19 09:21:21 +02:00

hid-steelseries.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-sunplus.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-tivo.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-tmff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-topseed.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-twinhan.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 178

2019-05-30 11:29:19 -07:00

hid-u2fzero.c

HID: u2fzero: fail probe if not using USB transport

2019-04-17 16:39:43 +02:00

hid-uclogic-core.c

Merge branch 'for-5.3/uclogic' into for-linus

2019-07-10 01:40:23 +02:00

hid-uclogic-params.c

Merge branch 'for-5.3/uclogic' into for-linus

2019-07-10 01:40:23 +02:00

hid-uclogic-params.h

HID: uclogic: Support Gray-coded rotary encoders

2019-02-21 12:00:54 +01:00

hid-uclogic-rdesc.c

HID: uclogic: Add support for Ugee G5

2019-02-21 12:00:54 +01:00

hid-uclogic-rdesc.h

HID: uclogic: Add support for Ugee G5

2019-02-21 12:00:54 +01:00

hid-udraw-ps3.c

HID: udraw-ps3: Replace HTTP links with HTTPS ones

2020-07-20 12:24:41 +02:00

hid-viewsonic.c

HID: viewsonic: Support PD1011 signature pad

2019-02-21 12:00:53 +01:00

hid-waltop.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-wiimote-core.c

HID: Wiimote: Treat the d-pad as an analogue stick

2020-06-19 14:17:22 +02:00

hid-wiimote-debug.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-wiimote-modules.c

HID: Wiimote: Treat the d-pad as an analogue stick

2020-06-19 14:17:22 +02:00

hid-wiimote.h

HID: Wiimote: Treat the d-pad as an analogue stick

2020-06-19 14:17:22 +02:00

hid-xinmo.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hid-zpff.c

HID: Fix assumption that devices have inputs

2019-10-03 15:36:40 -04:00

hid-zydacron.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

hidraw.c

Merge branch 'for-5.6/hidraw' into for-linus

2020-01-27 15:49:30 +01:00

Kconfig

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid

2020-08-10 16:33:54 -07:00

Makefile

Merge branch 'for-5.7/mcp2221' into for-linus

2020-04-01 13:36:46 +02:00

uhid.c

HID: hidraw, uhid: Always report EPOLLOUT

2020-01-10 15:34:28 +01:00

wacom_sys.c

HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices

2020-04-03 12:10:22 +02:00

wacom_wac.c

HID: wacom: Report 2nd-gen Intuos Pro S center button status over BT

2020-04-29 21:40:53 +02:00

wacom_wac.h

Merge branches 'for-5.2/fixes', 'for-5.3/doc', 'for-5.3/ish', 'for-5.3/logitech' and 'for-5.3/wacom' into for-linus

2019-07-10 01:39:57 +02:00

wacom.h

HID: wacom: generic: Treat serial number and related fields as unsigned

2019-11-06 21:37:29 +01:00