linux/drivers/hid/i2c-hid
Seth Forshee 0704fea9b2 HID: i2c-hid: Limit reads to wMaxInputLength bytes for input events
commit 6d00f37e49 upstream.

d1c7e29e8d (HID: i2c-hid: prevent buffer overflow in early IRQ)
changed hid_get_input() to read ihid->bufsize bytes, which can be
more than wMaxInputLength. This is the case with the Dell XPS 13
9343, and it is causing events to be missed. In some cases the
missed events are releases, which can cause the cursor to jump or
freeze, among other problems. Limit the number of bytes read to
min(wMaxInputLength, ihid->bufsize) to prevent such problems.

Fixes: d1c7e29e8d "HID: i2c-hid: prevent buffer overflow in early IRQ"
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
Reviewed-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-03-06 14:43:23 -08:00
..
Kconfig HID: i2c-hid: enhance Kconfig 2012-12-05 10:55:03 +01:00
Makefile HID: i2c-hid: introduce HID over i2c specification implementation 2012-11-19 11:04:38 +01:00
i2c-hid.c HID: i2c-hid: Limit reads to wMaxInputLength bytes for input events 2015-03-06 14:43:23 -08:00