Patch "HID: uclogic: fix limit in uclogic_tablet_enable()" has been added to the 4.1-stable tree
Subsystems (2)
This is a note to let you know that I've just added the patch titled
HID: uclogic: fix limit in uclogic_tablet_enable()
to the 4.1-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
hid-uclogic-fix-limit-in-uclogic_tablet_enable.patch
and it can be found in the queue-4.1 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
4a8e70f5d0d80675fc17b9ba1e62db8ca6b91775Mon Sep 17 00:00:00 2001
From: Dan Carpenter <[email protected]>
Date: Wed, 29 Jul 2015 13:16:06 +0300
Subject: HID: uclogic: fix limit in uclogic_tablet_enable()
From: Dan Carpenter <[email protected]>
commit 4a8e70f5d0d80675fc17b9ba1e62db8ca6b91775 upstream.
The limit should be ARRAY_SIZE(params) (5 elements) here instead of sizeof(params) (20 bytes).
--- drivers/hid/hid-uclogic.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
drivers/hid/hid-uclogic.c +1 -1
@@ -858,7 +858,7 @@ static int uclogic_tablet_enable(structfor (p = drvdata->rdesc; p <= drvdata->rdesc + drvdata->rsize -4 ;) {if (p[0 ] ==0xFE && p[1 ] ==0xED && p[2 ] ==0x1D && - p[3 ] <sizeof (params)) { + p[3 ] <ARRAY_SIZE (params)) { v = params[p[3 ]];put_unaligned (cpu_to_le32 (v), (s32 *)p); p +=4 ;
Patches currently in stable-queue which might be from [email protected] are
queue-4.1/hid-uclogic-fix-limit-in-uclogic_tablet_enable.patch