On Fri, 8 Sep 2017, Dmitry Torokhov wrote: > From: Adrian Salido <salidoa@xxxxxxxxxx> > > The buffer allocation is not currently accounting for an extra byte for > the report id. This can cause an out of bounds access in function > i2c_hid_set_or_send_report() with reportID > 15. > > Signed-off-by: Guenter Roeck <groeck@xxxxxxxxxxxx> > Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> I've added the missing tags and applied to for-4.14/upstream-fixes -- Jiri Kosina SUSE Labs -- To unsubscribe from this list: send the line "unsubscribe linux-input" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
