Doug / smarc-fsl-linux-kernel

13 Sep, 2013

2 commits

  • 0ccdd9e74   HID: lenovo-tpkbd: fix leak if tpkbd_probe_tp fails ... Browse Code »

    If tpkbd_probe_tp() bails out, the probe() function return an error,
    but hid_hw_stop() is never called.

    fixes:
    https://bugzilla.redhat.com/show_bug.cgi?id=1003998

    Cc: stable@vger.kernel.org
    Signed-off-by: Benjamin Tissoires
    Signed-off-by: Jiri Kosina

    Benjamin Tissoires
     
  • 0a9cd0a80   HID: lenovo-tpkbd: validate output report details ... Browse Code »

    A HID device could send a malicious output report that would cause the
    lenovo-tpkbd HID driver to write just beyond the output report allocation
    during initialization, causing a heap overflow:

    [ 76.109807] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009
    ...
    [ 80.462540] BUG kmalloc-192 (Tainted: G W ): Redzone overwritten

    CVE-2013-2894

    Signed-off-by: Kees Cook
    Cc: stable@vger.kernel.org
    Signed-off-by: Benjamin Tissoires
    Signed-off-by: Jiri Kosina

    Kees Cook
     

30 Apr, 2013

1 commit

05 Apr, 2013

1 commit

25 Feb, 2013

1 commit

  • d88142725   HID: use hid_hw_request() instead of direct call to usbhid ... Browse Code »

    This allows the hid drivers to be independent from the transport layer.

    The patch was constructed by replacing all occurences of
    usbhid_submit_report() by its hid_hw_request() counterpart.
    Then, drivers not requiring USB_HID anymore have their USB_HID
    dependency cleaned in the Kconfig file.

    Finally, few drivers still depends on USB_HID. Many of them
    are requiring the io wait callback. They are found in the next patch.

    Signed-off-by: Benjamin Tissoires
    Reviewed-by: Mika Westerberg

    For the sensor-hub part:
    Tested-by: Mika Westerberg
    Signed-off-by: Jiri Kosina

    Benjamin Tissoires
     

03 Jan, 2013

1 commit

  • f425458ea   HID: Use module_hid_driver macro ... Browse Code »

    Use the new module_hid_driver macro in all HID drivers that have
    a simple register/unregister init/exit.

    This also converts the hid drivers that test for a failure of
    hid_register_driver() and report the failure. Using module_hid_driver
    in those drivers removes the failure message.

    Signed-off-by: H Hartley Sweeten
    Signed-off-by: Jiri Kosina

    H Hartley Sweeten
     

01 Oct, 2012

1 commit

22 Sep, 2012

1 commit

17 Sep, 2012

1 commit

08 Jun, 2012

1 commit