On Sun, 12 Feb 2023 00:01:44 +0000, Pietro Borrello wrote:
> bigben_probe() does not validate that the output report has the
> needed report values in the first field.
> A malicious device registering a report with one field and a single
> value causes an head OOB write in bigben_worker() when
> accessing report_field->value[1] to report_field->value[7].
> Use hid_validate_values() which takes care of all the needed checks.
>
> [...]
Applied, thanks!
[1/1] hid: bigben_probe(): validate report count
commit: b94335f899542a0da5fafc38af8edcaf90195843
Best regards,
--
Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>
