diff options
| author |   Jiri Kosina <jkosina@suse.cz> | 2012-12-06 10:59:28 +0100 |
|---|---|---|
| committer | Jiri Kosina <jkosina@suse.cz> | 2012-12-06 10:59:28 +0100 |
| commit | 9afd09a1db93cc9084846c2b9bc0d1194743e5dc (patch) | |
| tree | 9ba2f25c20b765b0e47ea824534e8a29ee1a4c6f /drivers/input | |
| parent | HID: i2c-hid: fix i2c_hid_get_raw_report count mismatches (diff) | |
| download | linux-dev-9afd09a1db93cc9084846c2b9bc0d1194743e5dc.tar.xz linux-dev-9afd09a1db93cc9084846c2b9bc0d1194743e5dc.zip | |
HID: i2c-hid: fix ret_count check
ret_count has to be at least 3, as we have to count the 2 bytes that are used
for the size of the reply. Without this, memcpy() might be called with zero or
negative count.
Reported-by: Jean Delvare <khali@linux-fr.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Diffstat (limited to 'drivers/input')
0 files changed, 0 insertions, 0 deletions