Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0063466d authored by qctecmdr Service's avatar qctecmdr Service Committed by Gerrit - the friendly Code Review server
Browse files

Merge "ANDROID: Bluetooth: hidp: buffer overflow in hidp_process_report"

parents 2f79205f e9cf97c9

net/bluetooth/hidp/core.c

+2 −2
Original line number Diff line number Diff line
@@ -431,8 +431,8 @@ static void hidp_del_timer(struct hidp_session *session) 
		del_timer(&session->timer);

}



static void hidp_process_report(struct hidp_session *session,

				int type, const u8 *data, int len, int intr)

static void hidp_process_report(struct hidp_session *session, int type,

				const u8 *data, unsigned int len, int intr)

{

	if (len > HID_MAX_BUFFER_SIZE)

		len = HID_MAX_BUFFER_SIZE;