]> git.itanic.dy.fi Git - linux-stable/commit
HID: fix incorrent length condition in hidraw_write()
authorJiri Kosina <jkosina@suse.cz>
Tue, 11 Nov 2008 22:45:38 +0000 (23:45 +0100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 13 Nov 2008 17:56:06 +0000 (09:56 -0800)
commit91d0da3c88d130c03a16813aeee7dbedc539b017
tree9d9ac551dc5679c98ff96a34f881d57720a9b0ab
parent3c050502c4166dc12009f35eb41fabe9c900cd43
HID: fix incorrent length condition in hidraw_write()

upstream commit 2b107d629dc0c35de606bb7b010b829cd247a93a

From: Jiri Kosina <jkosina@suse.cz>

The bound check on the buffer length

if (count > HID_MIN_BUFFER_SIZE)

is of course incorrent, the proper check is

if (count > HID_MAX_BUFFER_SIZE)

Fix it.

Reported-by: Jerry Ryle <jerry@mindtribe.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Cc: Paul Stoffregen <paul@pjrc.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/hid/hidraw.c