On 11/11/16 00:58, Song Hongyan wrote: > Initialize user buffer with 0s. This will avoid random data in the buffer, > when the user buffer size is bigger than the actual report size. > > Signed-off-by: Song Hongyan <hongyan.song@xxxxxxxxx> Please describe the result of this bug in the description. Why does it matter? Without that info, it's hard to judge what path this should take into mainline or whether the fix needs to be marked for stable. Thanks, Jonathan > --- > Changes in v2: > -clear memory in get_feature() instead of set_feature() > > drivers/hid/hid-sensor-hub.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/drivers/hid/hid-sensor-hub.c b/drivers/hid/hid-sensor-hub.c > index 658a607..b74d954 100644 > --- a/drivers/hid/hid-sensor-hub.c > +++ b/drivers/hid/hid-sensor-hub.c > @@ -252,6 +252,7 @@ int sensor_hub_get_feature(struct hid_sensor_hub_device *hsdev, u32 report_id, > int report_size; > int ret = 0; > > + memset(buffer, 0, buffer_size); > mutex_lock(&data->mutex); > report = sensor_hub_report(report_id, hsdev->hdev, HID_FEATURE_REPORT); > if (!report || (field_index >= report->maxfield) || > -- To unsubscribe from this list: send the line "unsubscribe linux-input" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
