Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 677201b9 authored by Dmitry Torokhov's avatar Dmitry Torokhov Committed by Gerrit - the friendly Code Review server
Browse files

Input: add safety guards to input_set_keycode()



If we happen to have a garbage in input device's keycode table with values
too big we'll end up doing clear_bit() with offset way outside of our
bitmaps, damaging other objects within an input device or even outside of
it. Let's add sanity checks to the returned old keycodes.

Reported-by: default avatar <syzbot+c769968809f9359b07aa@syzkaller.appspotmail.com>
Reported-by: default avatar <syzbot+76f3a30e88d256644c78@syzkaller.appspotmail.com>
Link: https://lore.kernel.org/r/20191207212757.GA245964@dtor-ws


Signed-off-by: default avatarDmitry Torokhov <dmitry.torokhov@gmail.com>
Git-repo: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git


Git-commit: cb222aed03d798fc074be55e59d9a112338ee784
Change-Id: I1bd01ea3ffa0ba0e0303d19cfcc27cc39947963b
Signed-off-by: default avatarAlam Md Danish <amddan@codeaurora.org>
Signed-off-by: default avatarRahul Shahare <rshaha@codeaurora.org>
parent 02e8ec96
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment