Dan Carpenter 182d679b22 Input: joydev - prevent potential read overflow in ioctl ... The problem here is that "len" might be less than "joydev->nabs" so the loops which verfy abspam[i] and keypam[] might read beyond the buffer. Fixes: 999b874f4a ("Input: joydev - validate axis/button maps before clobbering current ones") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Link: https://lore.kernel.org/r/YCyzR8WvFRw4HWw6@mwanda [dtor: additional check for len being even in joydev_handle_JSIOCSBTNMAP] Cc: stable@vger.kernel.org Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>		2021-02-19 11:02:16 -08:00
..
gameport	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
joystick	Input: Add N64 controller driver	2021-01-24 21:16:21 -08:00
keyboard	Input: omap4-keypad - implement errata check for lost key-up events	2021-01-10 22:23:04 -08:00
misc	Input: da7280 - protect OF match table with CONFIG_OF	2020-12-18 10:04:34 -08:00
mouse	Input: synaptics - replace NOOP with suitable commentary	2021-01-19 19:03:11 -08:00
rmi4	Input: synaptics-rmi4 - use new structure for SPI transfer delays	2020-12-10 23:39:16 -08:00
serio	Input: parkbd - convert comma to semicolon	2020-12-11 13:06:11 -08:00
tablet	Input: gtco - remove driver	2020-12-09 17:47:36 -08:00
touchscreen	Input: elo - fix an error code in elo_connect()	2021-02-18 14:39:42 -08:00
Kconfig	Input: remove input_polled_dev implementation	2020-12-02 12:35:14 -08:00
Makefile	Input: remove input_polled_dev implementation	2020-12-02 12:35:14 -08:00
apm-power.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
evbug.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
evdev.c	Input: evdev - per-client waitgroups	2020-10-06 18:34:15 -07:00
ff-core.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
ff-memless.c	Input: ff-memless - kill timer in destroy()	2019-11-15 11:45:03 -08:00
input-compat.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
input-compat.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
input-leds.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
input-mt.c	Input: MT - avoid comma separated statements	2020-08-25 10:26:05 -07:00
input-poller.c	Input: use input_device_enabled()	2020-12-02 22:10:33 -08:00
input-poller.h	Input: add support for polling to input devices	2019-08-20 12:04:07 -07:00
input.c	Input: Add "inhibited" property	2020-12-02 22:10:35 -08:00
joydev.c	Input: joydev - prevent potential read overflow in ioctl	2021-02-19 11:02:16 -08:00
matrix-keymap.c	Input: matrix-keymap - switch to use device_property_count_u32()	2019-08-12 00:03:13 -07:00
mousedev.c	*: convert stream-like files -> stream_open, even if they use noop_llseek	2019-07-14 16:09:19 +03:00
sparse-keymap.c	Input: Use fallthrough pseudo-keyword	2020-07-07 11:25:54 -07:00